One control plane for your whole network

Run firewalls, mail, DNS and hosting from the cloud.

ArkaPanel manages your network appliances and hosting from one place. Describe what the network should do; it deploys the change to every device and site — atomically, with automatic rollback if anything fails.

FirewallWireGuard VPNMail + spam filterDNSWeb + TLSBackups
ArkaPanel control plane ArkaWall cpt-fw · v2026-09 ArkaWall jhb-fw · v2026-09 Mail VPN DNS Web

Three products, one login

The cloud panel, the appliance and the hosting platform work together — or on their own.

Everything the network needs, in one place

A real breadth of services — not a thin dashboard over someone else's stack.

Networking

  • nftables firewall with scheduled rules & port forwards
  • Multi-WAN failover, PPPoE and policy routing
  • VLAN segmentation and alias IPs
  • WireGuard VPN with client isolation

DNS & filtering

  • DHCP + DNS server for the whole LAN
  • Network-wide ad, tracker & content blocking
  • One-click app blocklists and allowlists
  • Per-group filtering policies

Security

  • CrowdSec intrusion prevention
  • Fail2ban brute-force protection with ban control
  • Web application security layer
  • Live packet capture for diagnostics

Mail & collaboration

  • Postfix + Dovecot mailboxes and aliases
  • rspamd spam filtering and ClamAV antivirus
  • Webmail & groupware (SOGo, Roundcube)
  • Compliance archiving with restore

Domains & web

  • Domain registration & transfer (EPP registrars)
  • Authoritative DNS, primary & secondary
  • Websites on Caddy with multi-version PHP
  • Automatic Let's Encrypt certificates

Storage & backup

  • Managed offsite backup (ArkaPanel Storage)
  • Encrypted, deduplicated restic snapshots
  • Per-domain and whole-appliance restore
  • Samba/NFS shares, ZFS + SnapRAID, Syncthing

Built to be managed, not babysat

Declarative & atomic

Changes are described in the panel and applied atomically to each device. A failed deploy rolls back to the last working state on its own.

Multi-tenant by design

Manage many clients and sites from one account, with per-user permissions, reseller trees and tenant isolation throughout.

Secure by default

WireGuard VPN, per-site TLS, spam filtering, brute-force protection and intrusion prevention are on from the start.

Backups & recovery

Scheduled, encrypted backups of sites, databases and whole appliances to storage you control — restorable to staging or live.

Reproducible

Every appliance is built from the same declarative config, so devices stay identical and free of configuration drift.

Visible

Bandwidth, flow and DNS insight, disk health, and deploy status — so you can see what each device is doing at a glance.

Pay for what you run

Simple monthly pricing, no lock-in.

Most popular

ArkaWall

$99 /mo

Cloud-managed firewall + services appliance. Firewall, VPN, DNS, mail and monitoring.

Explore ArkaWall

Web hosting

from $5 /mo

From the DNS Only plan — websites, business email, DNS and automatic HTTPS.

Explore hosting

ArkaPanel Storage

from $6 /100GB per month

Encrypted, deduplicated offsite backups. Restore to staging or over live data.

See storage

Domains

Register and transfer domains through real registrars, with DNS managed for you.

Search domains

Prices exclude 15% VAT · billed monthly · no lock-in.

See full pricing

Bring it all under one panel

Add a domain or claim an ArkaWall in minutes. Pay only for what you run — no lock-in.