Securytik Interactive Configuration Optimizer

Network configs, generated.
Not hand-typed.

Pick a scenario, answer a short wizard, and download a ready-to-import RouterOS script — built from templates validated on real hardware.

MikroTik today. Vendor-pluggable for Cisco and others tomorrow. Nothing to install, nothing to connect.

Free with any SecuryTik account — no limits, no card. Offline by design: your credentials never leave your router. Import with /import.

Completely free Every scenario, no limits, forever
Offline & private No router connection, no credentials
Hardware-validated Every line commented & tagged
Hotspot login designs 100 captive-portal templates, themeable

Scenario library

Eight guided scenarios cover the common builds — plus a Custom path that exposes every option. Each asks only the questions it needs.

Basic internet + NAT

WAN uplink, bridged LAN, DHCP and masquerade. Online in minutes.

Wi-Fi router

Multi-SSID Wi-Fi (wifi-qcom or legacy), each optionally on its own VLAN.

Office router with VLANs

A vlan-filtering bridge, per-zone gateways and DHCP, Wi-Fi, firewall and QoS.

PPPoE server

Your own PPPoE access concentrator with speed-limited profiles. No RADIUS.

Hotspot server

Captive-portal hotspot with speed tiers, local accounts and themeable login pages.

ISP server

PPPoE subscribers and a hotspot on one box — a full small-ISP edge.

CAPsMAN controller

Centrally manage many access points (wifiwave2 or legacy CAPsMAN).

Custom (full control)

Every option exposed: WANs, VLANs, PPPoE, hotspot, Wi-Fi, QoS, hardening.

Guided scenarios

100

Hotspot login designs

Apps & games for QoS

Price — free forever

No black box

See the exact RouterOS script before you import.

SICO shows you the full .rsc on the review screen. Every section is commented, every line tagged SICO: so you always know what it does and where it came from. Save up to 10 configs to your account and re-download any time.

Commented, sectioned, deterministic output
Real per-model interface names — ether, sfp, sfp-sfpplus, wifi
Save & re-download — up to 10 configs per account
Append an app/game DNS collector with one toggle

sico-office-vlans.rsc

# --- Bridge + VLAN filtering ---
/interface bridge add name=LAN vlan-filtering=yes
/interface bridge port add bridge=LAN interface=ether2 pvid=10
# --- VLAN gateways ---
/interface vlan add name=staff vlan-id=10 interface=LAN
/ip address add address=192.168.10.1/24 interface=staff
# --- DHCP for staff ---
/ip pool add name=staff-pool ranges=192.168.10.10-192.168.10.254
/ip dhcp-server add name=staff interface=staff \
    address-pool=staff-pool
# --- NAT ---
/ip firewall nat add chain=srcnat out-interface-list=WAN \
    action=masquerade comment="SICO:nat"

How it works

1 · Identify your router

Pick your MikroTik model and we know its ports — or enter the port counts manually.

2 · Answer the wizard

WAN uplink, LAN, VLANs, Wi-Fi or PPPoE — only the questions your scenario needs, with sensible defaults.

3 · Review the config

See the exact RouterOS script before you commit. Every line is commented and tagged.

4 · Download & import

Download the .rsc and run /import on your router. That's it.

Network configs, generated.Not hand-typed.