Managed Paart

Paart makes the client side easier. The next step is making the other side of the tunnel easier too.

Managed Paart is a management interface that integrates directly into the OPNsense management UI: manage your users and their WireGuard access without editing configuration files by hand. Why WireGuard does not scale by hand.

Create the user. Assign the device. Paart handles the rest. Configurations are deployed from the firewall, and when something in one of them changes, the update reaches the device on its own. Nobody has to send a configuration file again, or explain how to import it.

A device gets lost? Someone leaves the company? Revoke its access from the firewall, remotely, without waiting for anyone to touch the device. Revocation happens on your own infrastructure rather than by asking a device to co-operate.

Keys never travel. Each device generates its own and keeps it in its own secure storage: someone with a laptop and a phone has two, and revoking one leaves the other intact. Keys can be renewed remotely, manually, and the user has nothing to import and no new configuration to install.

Your infrastructure. Not ours. Managed Paart is designed to run inside your own infrastructure: no Paart cloud, no SaaS, no dependency on anything of ours. The plugin runs with your OPNsense firewall, and it is free and open source, BSD 2-Clause — no licence key, no cap.

No official release date or final pricing yet. But this is not just an idea on a roadmap: the system is already working and has been tested in the lab, and the current Paart client is already compatible with it. Managed Paart requires an OPNsense plugin that is not available in the official repository yet.