For agencies
Made for teams with dozens of client sites.
Most firewalls are designed around one company and one website. OpenWAF starts from an agency’s day-to-day: many domains, many stacks and several people making changes, with your brand on top.
Built for agencies
Made for teams that look after dozens of client sites
Most firewalls are designed around one company and one website. OpenWAF starts from an agency’s day-to-day: many domains, many stacks and several people making changes.
- One nameserver pair for every client, or a CNAME when the client keeps its DNS
- Presets and cache templates for WordPress, Next.js and static sites
- Mandatory change reasons, an audit log and a live view of security events
- An MCP server for AI assistants, the API and the
openwaf-cloud ctlcommand line
Presets for the stacks your agency already runs
- WordPress
- Next.js
- Static sites
- Any HTTP origin
- Let’s Encrypt TLS
Dashboard and agency toolsOne dashboard for every client, under your brand.
At dash.openwaf.dev, in English and Spanish.

- Sign-up without passwords
With a one-time e-mail code, or with Google or GitHub.
- Agency view
All your domains with their delegation, certificates and blocked requests.
- Bulk onboarding
Paste a list or upload a CSV of domains, each with its client if you like.
- Sub-accounts per end client
Organise domains by client and give a client’s people access to that client’s domains only.
- White label
Your brand and logo, the dashboard on your own domain and nameservers under your own name.
- Members, tokens and audit
Invitations with roles, API tokens and the audit log of every change.
Coming soonWhat we are building next.
No dates yet: we will announce each one when it is ready.
- Configuration templates
Apply the same settings to many domains at once.
- DNSSEC
Signed DNS zones on your nameserver pair.
- More locations
More edge locations beyond Germany and Spain.
FAQ
Questions agencies ask us
Can our clients log in?
Yes, if you want them to. Group domains by end client and invite a client’s people with access limited to that client’s domains. With white label they see your brand, your own dashboard domain and your own nameservers.
Can I add many domains at once?
Yes. Paste a list or upload a CSV of domains, each with its client if you like.
Bring your agency’s sites into early access.
OpenWAF is free while it is in early access. Create your account, add your clients’ domains and switch their nameservers or add a CNAME: the dashboard guides you through each step.
