Rampart 1.0 — Your OPNsense Firewall, in Your Pocket

If you run OPNsense at home, you already know the ritual. Something feels off with the network, so you pull out your laptop, find the firewall's IP, log into the web UI, squint at a dashboard that was designed for a 27-inch monitor, and dig through tabs to find the one number you actually wanted. It works — OPNsense is superb — but it was never meant to be checked from the couch, the train, or a hotel room.

Rampart fixes that. It's a native iPhone, iPad and Mac app that connects directly to your OPNsense firewall and gives you everything that matters at a glance. Today it's out on the App Store, version 1.0, free.

What Rampart shows you

Rampart talks to OPNsense through its official REST API, so it reflects your real configuration — not a simplified copy of it. Out of the box you get:

• A live dashboard — system health, CPU and memory load, pf state count, uptime, and a real-time WAN traffic chart so you can watch throughput as it happens.
• Interfaces — every physical port, VLAN, bridge and gateway, with link status, addresses and online/offline state.
• Firewall logs — the pass/block stream, so you can see what's actually hitting your rules right now.
• Services — Unbound, Suricata, CrowdSec, DHCP, WireGuard and the rest, each with its running state.
• WireGuard — your tunnels and peers, read-only, at a glance.
• IDS/IPS alerts and DHCP leases — the Suricata alert feed and who's currently on your network.

Everything refreshes on a live cadence, and the app degrades gracefully on a bad connection: a single failing endpoint keeps its last-known value instead of blanking the whole screen, and airplane mode is detected instantly rather than hanging on a timeout.

Privacy is the whole point

A firewall app that phoned home would be a contradiction. Rampart doesn't have a backend. There is no LorisLabs server in the middle, no account to create, no telemetry. The app makes a direct connection from your device to your firewall — over your LAN, a VPN, or Tailscale — and that's the only connection it makes.

Your API key and secret are generated by you in OPNsense and stored only in the device Keychain. They are never written to a config file, never uploaded, and never leave the device. The first time Rampart connects to a firewall over HTTPS it pins the certificate (trust-on-first-use); if that certificate later changes, the app stops and tells you, because on a firewall a changed certificate is exactly the kind of thing you want to be warned about.

You can add multiple firewalls and switch between them, and lock the whole app behind Face ID or Touch ID.

An AI assistant that respects the same rules

Rampart includes an optional assistant that turns plain-English questions — "is my firewall secure?", "which rules are redundant?" — into structured answers grounded in your actual configuration. It's built for people who don't want to memorise every pf nuance.

Crucially, it follows the same privacy model as the rest of the app. You can run it fully on-device using Apple's Foundation Models on supported hardware, so nothing leaves your iPhone or Mac at all. Or, if you'd rather use Claude for maximum depth, you bring your own Anthropic API key — the request goes from your device straight to Anthropic, never through us. Either way, LorisLabs never sees your rules, your IPs, or your logs.

Built like a native app, not a web view

Rampart isn't a wrapper around the OPNsense web UI. Every screen is built in SwiftUI and tuned for each platform: a tab bar on iPhone, a proper sidebar on Mac, large-title navigation, haptics, full dark mode, Dynamic Type and VoiceOver support throughout. It feels like it belongs on the device because it does.

What's next

1.0 is deliberately focused on monitoring done well. On the roadmap: editing firewall rules safely with a 60-second auto-rollback savepoint, a Home Screen widget for firewall health, and deeper DNS and CrowdSec views. If there's a view or a number you wish you had, tell us — this is a studio small enough to actually listen.

Getting started

1. In OPNsense, create an API key (System → Access → Users → your user → API keys).
2. Open Rampart, tap Get started, and enter your firewall's host and that key.
3. That's it — you're monitoring.

Not ready to connect a real firewall yet? Tap Explore demo on the first screen to browse the whole app with realistic sample data, no setup required.

Try Rampart

Free on the App Store for iPhone, iPad and Mac. If you run OPNsense, we think you'll like having it in your pocket.

Download on the App Store

Got a setup you'd want Rampart to handle better? I'd love feedback: [email protected] · or the support page.