For ISPs, WISPs, MSPs and IT distributors
The AI-powered NOC.Your fleet, run by software that never sleeps.
OptiWize provisions, backs up, monitors and secures MikroTik estates from a single multi-tenant panel. ARIA sits on top and does the diagnosis, in plain English, on real devices, with every action audited.
Thousands of devices, one panel, one engineer on call.
Mass onboarding, configuration locked against drift, backups and CVE exposure handled, and an AI engineer that diagnoses before you wake anyone up.
See the platform You sell to networksPut your name on it. You own the customer.
Full white-label: your brand, your domain, your logo. Strict tenant isolation underneath, so one platform serves every service provider in your book without them ever seeing each other.
See the partner programThe cost of the status quo
3 AM in the NOC.
BGP is flapping. A remote router drops offline. The management VPN is down. Your best engineer is asleep, and the person who is awake has never seen this routing table before.
47 minutes to a fix
The industry baseline for diagnosing and resolving a single incident by hand, across devices reached one SSH session at a time.
Manual CLI, device by device
Troubleshooting means jumping between hundreds of routers, each with its own history and its own surprises.
Knowledge in two heads
Two senior engineers really understand the routing configuration. Everything at 3 AM depends on whether one of them picks up.
Alert fatigue
Hundreds of raw notifications per shift, drowning the handful that actually mattered.
The unified paradigm
Two products, one platform: the muscle and the brain.
Reactive firefighting becomes proactive operations when the system that knows the fleet is the same system that can act on it.
The brain
Always on. Reads the fleet, plans the diagnosis, picks the tool, explains what it found in the language the engineer asked in.
The muscle
Centralised provisioning, monitoring, backup and SD-WAN management for MikroTik fleets in the tens of thousands. Validates every permission, executes against the right tenant, writes the audit record.
The fleet
The MikroTik devices your NOC already manages. No new hardware, no forklift migration.
The control plane
OptiWize: scale a MikroTik estate without scaling the night shift.
One multi-tenant panel for provisioning, monitoring, backup, security and remote access, across fleets in the tens of thousands.
Onboard
Provision thousands of MikroTik devices in hours through the automated provisioner, bulk CSV import with per-record status, and idempotent onboarding scripts. Not weeks.
Standardise
Apply validated, atomic templates across the fleet. Version control keeps configuration consistent across diverse hardware and RouterOS versions.
Operate
Proactive monitoring, automated backups to S3 with retention, and one-click configuration diffs. The fleet tells you before the customer does.
Run the fleet
Jobs, pipelines and canary rollouts
Schedule one-off, recurring or chained jobs across the fleet. Roll out progressively, 5% then 25% then 100%, with auto-pause on failure and one-click rollback.
Winbox and console in the browser
WebWinbox and WebSSH reach any managed device without a VPN client. Access links are session-bound, single-use and rate-limited.
Device Detail and Supout
One page per device: live telemetry, charts from 1 hour to 7 days, interfaces, DHCP leases, logs. Pull MikroTik support files on demand and read them inline.
Mass import and provisioners
Bulk CSV import with per-record status, idempotent onboarding scripts, and auto-discovery through a provisioner on site.
Fleet dashboards and device map
Role-scoped overviews, health gauges, resource saturation, offline aging and deployment velocity, plus every device on a live map.
RouterOS editor with real syntax
Monaco editor with a MikroTik RSC language mode, variables, autocomplete, and a community template library.
Protect the fleet
ConfGuard
Lock a device to a known-good configuration. Periodic checks detect drift, show the diff, and roll back in one click. Append-only history per device.
S3 backup with diff and retention
Automated backups to S3-compatible storage, side-by-side comparison of two snapshots, retention ranked by real backup date. Backups follow a device across customers.
CVE exposure monitoring
Nightly sync from NVD and MikroTik advisories. Per-device badge, CVSS detail, fleet-wide exposure chart, print-ready PDF report.
NIS2 audit log
Every API request recorded with 24-month retention, semantic actions, role-scoped consultation, CSV export and tamper-evident manifests.
Out-of-band channel
When the VPN is down, devices keep polling over HMAC-authenticated HTTP. Telemetry keeps flowing and emergency commands still land.
Granular policies and SSO
Per-feature permissions, policy groups, 2FA, and optional sign-in with Google, Microsoft or GitHub, gated to your own domain on white-label.
Extend the fleet
SD-WAN and SD-WAN Lite
Bonding and failover across gateways, local preference, MTU discovery, gateway status timeline with failure cause. Lite variant for single-gateway sites.
Elastic IP
Public IP pools per region with reservation, ACK workflow, conflict checking and a compliance-grade assignment audit.
Content filtering
AI-based filtering through the FlashStart integration, activated per customer from the panel.
The AI NOC engineer
ARIA does not suggest a command. It runs it.
Diagnose, troubleshoot and configure MikroTik networks in natural language, against the fleet OptiWize already manages, with every action validated and audited.
aria> Why can't VLAN 20 reach the file server?
Running diagnostics on vlan-20...
Checking interface bridge1... OK
Checking routing table... OK
Checking firewall rules... ISSUE FOUND
-> Rule #14 drops inter-VLAN traffic on chain forward
-> Suggested fix: /ip firewall filter set 14 disabled=yes
-> Awaiting approval. Pre-execution backup ready, rollback armed.What it does
Natural language troubleshooting
Questions in plain English, answered with RouterOS context and actionable diagnostics rather than generic advice.
Agentic tool execution
Eight real tools: ping, traceroute, bandwidth test, custom commands. ARIA runs the check itself and reads the result.
Template provisioning
Over 55 validated templates for firewall, DHCP, VPN, routing and QoS. Safe, repeatable configuration at scale.
RouterOS knowledge base
Retrieval over the full RouterOS documentation, so answers are grounded in the manual rather than invented.
Templates, never raw commands
The model selects from a validated library. It cannot compose an arbitrary command against a production router.
Sessions as PDF reports
Export a diagnostic session for shift handover, for the customer, or for the incident file.
One incident, end to end
- 1
The complaint
A customer reports slow internet or an unreachable service.
- 2
Autonomous diagnosis
ARIA runs checks on interfaces, bridges and routing tables without anyone typing a CLI command.
- 3
Root cause
The conflicting firewall rule is identified, with the evidence that points to it.
- 4
Execution
ARIA produces the exact RouterOS command. The engineer approves. A pre-execution backup is already taken.
- 5
Handover
The session is exported as a PDF report, so the next shift starts where this one ended.
What changes
- 47 minutes to resolve one incident, the industry baseline for manual diagnosis
- Manual CLI typing across hundreds of devices
- Two engineers really understand the routing configuration
- Hundreds of raw notifications per shift
- Minutes instead of an hour: under 5 minutes is the ARIA-assisted target
- Autonomous diagnostics driven in natural language
- Institutional knowledge encoded and retrievable, so every engineer operates like a senior
- Correlated alerts: noise becomes an actionable signal
Built for the channel
Four levels, strict isolation, your name on all of it.
One platform serves a distributor, the service providers in their book, and every end customer underneath, without any of them seeing each other.
Distributor or platform owner
Complete oversight. Manages multiple service providers from one place.
ISP, WISP or MSP
Manages all of their end customers, with strict data isolation from every other tenant.
End-user organisation
An isolated environment per business, scoped to what that business is allowed to see.
The fleet
Tens of thousands of individual MikroTik routers, each belonging to exactly one place in the hierarchy.
White-label, all the way down
Your brand, your domain, your logo, including the sign-in page and the reports your customers receive. Role-based access control enforces the boundaries at every level, so white-labelling never means loosening isolation.
Production and compliance
Built to survive your customer's security questionnaire.
An EU vendor, an audit trail sized for NIS2 obligations, and an AI that is architecturally prevented from improvising against a production router.
NIS2 audit trail
Every API request recorded with user, IP and timestamp, retained for 24 months, exportable to CSV with tamper-evident manifests.
RBAC across four tiers
Role hierarchy with tenant, customer and device isolation, plus per-feature permissions and policy groups.
JWT with rotation
15-minute access windows, hashed refresh tokens, silent refresh, permissions cleared at logout.
Single-use tickets
Console and Winbox links carry no credential. A copied URL cannot be reopened somewhere else.
Templates, not raw commands
ARIA selects from a validated library and cannot compose an unconstrained command. Pre-execution backups and auto-rollback on failure.
Out-of-band channel
When the management VPN is down, devices keep polling over HMAC-authenticated HTTP. Telemetry keeps flowing and emergency commands still land.
Where it already runs
Trusted by network operators, in production.
Figures from the production platform, August 2026. Availability is the target we operate to, not a contractual commitment; ask us for the current SLA if you need one in writing.
How it lands
Cloud or your own hardware. Either way, it talks to what you already run.
Start immediately
Managed infrastructure, nothing to install. The fastest route from a device list to a working panel.
Full control over your data
Deployed on your own hardware as virtual machines, under annual licensing, for operators whose data cannot leave their estate.
Over 200 documented endpoints
The panel is one client of the same REST API you get. OpenAPI described, so integration with your CRM, billing or existing NOC dashboards is a normal piece of work.
Bring the fleet as it is
Bulk import with per-record status and auto-discovery through an on-site provisioner. No forklift replacement, no new hardware.
Partner program
Sell the platform, or put your name on it.
If MikroTik hardware already moves through you, OptiWize and ARIA turn a one-off box sale into a recurring relationship, under our brand or yours.
You introduce, we close.
- No minimum commitment
- Co-branded landing page
- Partner portal access
- Deal registration, so your introduction stays yours
You own the customer relationship.
- You hold the contract, the invoice and the renewal
- Dedicated account manager
- Priority support queue
- Joint sales calls and quarterly reviews
It becomes your product.
- Full white-label rights: brand, domain, sign-in
- API access for integration with your stack
- Dedicated engineering support
- Territory and SLA options
What you get on day one
- Technical training and a certification path for your engineers.
- Co-branded material, joint campaigns and lead sharing.
- Onboarding in four steps: apply, certify, launch, grow.
What your customers get
- A platform already running tens of thousands of devices in production, across six countries.
- An EU vendor, with the audit trail their NIS2 obligations require.
- A public changelog and a release cadence they can verify themselves.
Licensing
How it is licensed, before we talk about what it costs.
Two products, two models. The number depends on fleet size, deployment and partner tier, which is why it belongs in a conversation rather than on a page.
Per user, per month
Three tiers, from individual operators running their first production workflows through to full NOC teams that need maximum capacity, bring-your-own-key and a choice of AI model.
Per tenant
Quoted on the platform tier you need, sized to the fleet under management rather than to seats.
Cloud or on premise
Cloud is a subscription. On premise is annual licensing on your own virtual machines. Both carry the same feature set.
Partner terms on top
Referral, reseller and white-label tiers each change the commercial terms. Tell us which one fits and we will quote against it.
Next step
Bring us a device list. We will show you the rest.
A demo runs against a real MikroTik fleet, not a sandbox. Tell us how many devices you manage and which conversation you want to have, the operational one or the commercial one.
Partner program: info@optiwize.cloud
Platform: optiwize.cloud
ARIA: runaria.ai