CyberIndexBeta

Product

Free, open-source FreeBSD-based firewall and routing distribution under a 2-clause BSD licence. Purchasing the paid version also supports the project, ensuring our community continues to benefit from ongoing innovation and improvement. Community testing helps us update software swiftly and develop our roadmap efficiently. OPNsense is as customizable as the hardware it can run on. It is available as a cloud instance and a virtual appliance.

Current Version
26.7.7
Product Page
opnsense.org
Market
ConsumerSMB
Licence
Open source
Price
Free
Record Created
2026-09-19
Last Updated
2026-10-28

Vendor

Deciso is a Dutch hardware and software company that does something unusual among the vendors here: the firewall it sells is open source, and anyone can run it for nothing. It develops OPNsense, a FreeBSD-based firewall platform forked from pfSense in 2015, and publishes the full source; its business is selling the appliances it runs best on and the support and signed updates that organisations need. OPNsense Community Edition is the free version, OPNsense Business Edition adds a stable release train, commercial support and additional plugins, and the DEC series appliances are Deciso's own hardware, built in the Netherlands and sized from small offices to rack-mounted units. For a buyer, the trade is a familiar one in open-source infrastructure: no licence cost and complete visibility of what the firewall does, in exchange for doing more of the integration yourself. It is bought heavily by European managed service providers and by organisations that want to see the code in the device at their perimeter. Vendor page →

Website
deciso.com
Country
Netherlands
Headquarters
Netherlands
Year Established
2000
Customers
3,000 organisations
Users
300K deployments
Revenue
$8.0M (2026)

Platforms

Cloudnative
Virtual Appliancenative

Target Market

Consumer primarySMB secondary

Capabilities

Stateful Inspectionkeynative
Intrusion Prevention (IPS)keyintegrated
Intrusion Detection (IDS)integrated
SSL/TLS Inspectionkeyoptional module
VPN Gatewaykeynative
SD-WANNot known
Application Controlkeynative
High Availabilitynative
Deep Packet Inspectionnative
Central Management ConsoleNot known

2 of 10 not yet known — not recorded, which is not the same as not supported.

Specifications

Firewall TypeNetwork (NGFW / UTM)

4 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummaryOpen sourcenot statedno recurring chargeFree

Versions

  • 26.7.7platform not recordedreleased 2026-10-13

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-09-19. Everything below is what has changed since.

  • 2026-10-28New versionNew version: 26.7.7evidence
  • 2026-10-08Capability addedSSL/TLS Inspection: optional moduleevidence
  • 2026-10-08Capability addedDeep Packet Inspection: built inevidence
  • 2026-10-08Capability addedHigh Availability: built inevidence
  • 2026-10-08Capability addedVPN Gateway: built inevidence
  • 2026-10-06Capability addedIntrusion Prevention (IPS): integratedevidence
  • 2026-10-06Capability addedIntrusion Detection (IDS): integratedevidence
  • 2026-10-06Capability addedApplication Control: built inevidence
  • 2026-10-06Capability addedStateful Inspection: built inevidence
  • 2026-09-20Pricing plan addedPrice: open sourceevidence
  • 2026-09-20New versionNew version: 26.7.3evidence
  • 2026-09-20Platform addedRuns on Cloudevidence
  • 2026-09-20Platform addedRuns on Virtual Applianceevidence
  • 2026-09-19Product updatedSold to: Consumerevidence
  • 2026-09-19Product updatedAlso sold to: SMBevidence
  • 2026-09-19Product createdNew product, listed in Network Firewallevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.