MikroTik Security Audit: Router Security Check from $100

The router works, internet is up, everyone’s happy. But what’s in the firewall, which ports are exposed to the outside, and who has access to Winbox – nobody knows. That’s usually how holes get found: not by you, but when it’s already too late. A MikroTik security audit closes this blind spot for small offices without a dedicated network engineer on staff.

What a MikroTik configuration review covers

I don’t treat the router as a black box. I take it apart piece by piece: what’s open, what’s unnecessary, what got left on after the last configuration change.

• Full review of the current configuration, not a spot check
• Report with findings sorted by severity
• Fixing critical issues with your approval
• Configuration backup before and after changes

How the work is done

%%{init: {
  'theme': 'base',
  'themeVariables': {
    'primaryColor': '#ffffff',
    'primaryTextColor': '#1e293b',
    'primaryBorderColor': '#94a3b8',
    'lineColor': '#64748b',
    'fontSize': '15px',
    'fontFamily': 'ui-sans-serif, system-ui, sans-serif'
  },
  'flowchart': {'curve': 'linear', 'nodeSpacing': 50, 'rankSpacing': 50}
}}%%
flowchart TD
    S1["1. Getting access and exporting the configuration - 0.5 day"]
    S2["2. Firewall analysis - 0.5 day"]
    S3["3. Risk report sorted by severity"]
    S4["4. Fixing critical issues with approval"]
    S5["5. Wrap-up call"]
    S1 --> S2
    S2 --> S3
    S3 --> S4
    S4 --> S5
    style S1 fill:#f8fafc,stroke:#3b82f6,stroke-width:2px,color:#1e40af
    style S2 fill:#f8fafc,stroke:#94a3b8,stroke-width:2px,color:#1e293b
    style S3 fill:#f8fafc,stroke:#94a3b8,stroke-width:2px,color:#1e293b
    style S4 fill:#f8fafc,stroke:#94a3b8,stroke-width:2px,color:#1e293b
    style S5 fill:#f8fafc,stroke:#22c55e,stroke-width:2px,color:#15803d

1. Access and configuration export. You give me a temporary user on the router, I pull the current settings for analysis. Takes about half a day.
2. Configuration analysis. I check the firewall (the rules that decide what gets into the network and what doesn’t), open services, the user list, the RouterOS version, NAT and VPN settings. Also about half a day.
3. Risk report. I put all the findings into a document sorted by severity: what needs fixing right away, what can wait.
4. Fixing critical issues. Anything genuinely dangerous gets fixed right away, with your approval. I take a backup before and after the changes, so there’s something to roll back to.
5. Wrap-up call. We go through the report together, I explain what I found and what I did, and answer your questions.

Equipment needed

Nothing to buy. I work with your existing MikroTik, whatever state it’s in and whoever configured it. If you don’t have a router yet, or need to replace one, that’s a separate task, and I’ll pick a device for it separately.

What gets set up after the audit

• RouterOS updated to the latest version
• Firewall built on “deny everything that isn’t explicitly allowed”, meaning only what’s actually needed for work stays open
• Restricted access to Winbox and SSH (the management panel and admin console), so not just anyone on the internet can get into the router
• Default services that are enabled out of the box and nobody needs, turned off
• Automatic configuration backup, so you don’t have to rebuild everything from scratch after a failure

What you get as a result

• A report with the risks found and clear recommendations
• A fixed router configuration
• Configuration backups from before and after the work
• A list of every change made

MikroTik security audit pricing

Base price starts at 10 000 ₽, takes 1-2 days, fully remote. The exact cost depends on network complexity and the number of devices.

Not included in the price: Rebuilding the network from scratch (a separate “Turnkey MikroTik setup for office” service), on-site visits.

After delivery: 14 days of free fixes for any issues found. After that: one-off work at 2 000 ₽/hour or support plans starting at 4 000 ₽/month.

What I need from you

• Temporary remote access to the router (a separate user, not your main login)
• Description of the network: which ISPs are connected, which ports are forwarded, whether there’s a VPN
• Contact for the wrap-up call
• Willingness to approve changes if something needs to be temporarily turned off

Frequently asked questions

Is the audit done remotely or does it require a site visit?

Remotely. On-site visits aren’t included in the base price and usually aren’t needed at all, temporary access to the router is enough.

How long does a MikroTik configuration check take?

1-2 days from the moment I get access and the network description.

What if someone else configured the router and there’s no documentation?

That’s a normal situation, it’s actually how most requests start. I’ll work out the configuration from scratch, no backstory needed.

What happens if something critical turns up during the audit?

I’ll fix it with your approval, taking a backup before and after the change. Nothing gets changed without your “yes”.

What happens after the work is delivered?

I fix any issues that come up for free for 14 days. After that, one-off fixes are billed separately, or you can switch to ongoing support.

Can you check multiple offices or branches?

Yes, auditing an additional router or branch is done separately and discussed individually based on the task.

Related reading

• Configuring MikroTik Firewall Against DDoS and Bruteforce: an IT engineer’s cheat sheet