The Unimus alternative built for enterprise, OT and air-gapped networks
If you run a small to mid-size network and want fast, no-code setup, Unimus is a solid on-premise NCM.
If you need open source, OT segmentation, distributed collection, or scale past 1,000 devices without a licence-tier jump, rConfig is built for that.
Self-hosted · Open-source Core · OT-ready · Sources dated

Quick verdict
Unimus suits small to mid-size networks that want fast, no-code setup. rConfig suits teams that need open source, OT segmentation, distributed collection or scale past 1,000 devices without a tier jump.
Stay on Unimus if
You run a small to mid-size network and want fast, no-code setup without standing up anything new.
Look at rConfig if
You need open source, OT segmentation, distributed collection, or plan to scale past 1,000 devices without a licence-tier jump.
rConfig vs Unimus
Both are dedicated network configuration management (NCM) tools. Every Unimus fact below is checked 25 September 2026 against unimus.net; every rConfig fact links to the product page or pricing page it comes from. All sources are listed in the dated sources.
- What mattersCategoryUnimusrConfigDedicated, self-hosted network configuration management (NCM).
- What mattersSource modelUnimusProprietary, closed source.6rConfigV8 Core is open source and free, with no licence keys. Starter, Standard and Enterprise are commercial editions built on it.12
- What mattersFree optionUnimus10 devices free, no time limit. Excludes Compliance and SAML/OIDC.3rConfigV8 Core: free, open source, no device limit.
- What mattersPaid modelUnimusPer device, billed yearly: Standard 6.90 USD, Advanced 9.70 USD per device per year (list price since 1 October 2025), capped at 1,000 devices, then an annual Unlimited licence.34rConfigOne flat annual price per edition and device band: Starter to 300 devices, Standard to 1,000 devices, Enterprise custom per device beyond 1,000.
- What mattersCompliance tierUnimusrConfigPolicy checks and compliance are included from Starter up.8
- What mattersSAML / OIDC tierUnimusAdvanced tier only. Standard and Advanced licences cannot be mixed on one account.3rConfigSSO with SAML and OIDC is included on every edition, including the free Core.8
- What mattersLicence validation and air-gapUnimusNormally requires a connection to Unimus's licensing server. Offline (air-gapped) mode is supported only on the Unlimited tier.3rConfigAir-gapped deployment is included on every edition, from Core to Enterprise.8
- What mattersDistributed collectionUnimusDevices are split into Zones, each polled by a Remote Core, with built-in multi-tenancy and high availability.2rConfig
- What mattersOT segmentsUnimusRemote Core per Zone.rConfigThe rConfig Vector Agent deploys inside the OT segment with a single outbound rule to rConfig. SSH credentials and device traffic stay local; only signed, structured job results cross the boundary.9
- What mattersIoT and non-CLI devicesUnimusVendor states over 400 device types from more than 150 vendors.2rConfigVector's device tier explicitly spans routers, switches, firewalls, CPEs, GPON/FTTH kit, DC networks, wireless, IoT and OT.10
- What mattersMulti-tenancyUnimusBuilt in, across Zones, alongside high availability.2rConfig
- What mattersPublished scale evidenceUnimusNo independently published large-scale benchmark identified. Per-device licensing is capped at 1,000 devices before the Unlimited tier.3rConfigLatest benchmark backs up over 50,000 devices in under 21 minutes, with realistic fault conditions included.13
- What mattersSecurity postureUnimusApplication-layer encryption in transit and at rest. RBAC, MFA, RADIUS and LDAP.2rConfigRBAC, LDAP/Active Directory and RADIUS from Starter up. SSO with SAML and OIDC on every edition, including Core.8
| What matters | Unimus | rConfig |
|---|---|---|
| Category | On-premise network configuration management (NCM), from NetCore j.s.a., on the market since 2016.12 | Dedicated, self-hosted network configuration management (NCM). |
| Source model | Proprietary, closed source.6 | V8 Core is open source and free, with no licence keys. Starter, Standard and Enterprise are commercial editions built on it.12 |
| Free option | 10 devices free, no time limit. Excludes Compliance and SAML/OIDC.3 | V8 Core: free, open source, no device limit. |
| Paid model | Per device, billed yearly: Standard 6.90 USD, Advanced 9.70 USD per device per year (list price since 1 October 2025), capped at 1,000 devices, then an annual Unlimited licence.34 | One flat annual price per edition and device band: Starter to 300 devices, Standard to 1,000 devices, Enterprise custom per device beyond 1,000. |
| Compliance tier | Configuration and runtime compliance is Advanced tier only.35 | Policy checks and compliance are included from Starter up.8 |
| SAML / OIDC tier | Advanced tier only. Standard and Advanced licences cannot be mixed on one account.3 | SSO with SAML and OIDC is included on every edition, including the free Core.8 |
| Licence validation and air-gap | Normally requires a connection to Unimus's licensing server. Offline (air-gapped) mode is supported only on the Unlimited tier.3 | Air-gapped deployment is included on every edition, from Core to Enterprise.8 |
| Distributed collection | Devices are split into Zones, each polled by a Remote Core, with built-in multi-tenancy and high availability.2 | Vector Agent collectors, deployed per site or per segment, are an Enterprise capability. Distributed collectors and high availability are not included on Core, Starter or Standard.810 |
| OT segments | Remote Core per Zone. | The rConfig Vector Agent deploys inside the OT segment with a single outbound rule to rConfig. SSH credentials and device traffic stay local; only signed, structured job results cross the boundary.9 |
| IoT and non-CLI devices | Vendor states over 400 device types from more than 150 vendors.2 | Vector's device tier explicitly spans routers, switches, firewalls, CPEs, GPON/FTTH kit, DC networks, wireless, IoT and OT.10 |
| Multi-tenancy | Built in, across Zones, alongside high availability.2 | Device and tag-level access separation from Standard up; full Vector Central multi-tenancy for MSP fleets at Enterprise.811 |
| Published scale evidence | No independently published large-scale benchmark identified. Per-device licensing is capped at 1,000 devices before the Unlimited tier.3 | Latest benchmark backs up over 50,000 devices in under 21 minutes, with realistic fault conditions included.13 |
| Security posture | Application-layer encryption in transit and at rest. RBAC, MFA, RADIUS and LDAP.2 | RBAC, LDAP/Active Directory and RADIUS from Starter up. SSO with SAML and OIDC on every edition, including Core.8 |
How each product reaches your devices
Unimus splits devices into Zones, each polled by a Remote Core, with multi-tenancy and high availability built in.2rConfig's Enterprise edition uses a three-tier architecture instead: one central manager, a layer of rConfig Vector Agent collectors deployed per site or segment, then the devices themselves, including IoT and OT.1110
OT and IoT backups
Unimus's OT answer is a Remote Core placed in the Zone. rConfig's is the Vector Agent, purpose-built for segments where nothing should dial in.
Outbound only
The Vector Agent only makes outbound TLS connections to rConfig. It pulls jobs, pushes results and streams logs on that same channel. rConfig never initiates a connection to the agent.9
No IT credentials in OT
Run the agent inside the OT segment with a one-way outbound rule to rConfig. SSH credentials and device traffic stay on the OT side.9
Signed job results cross the boundary
Only signed, structured job results leave the OT segment, the pattern many customers use for NIS2, NERC-CIP and internal OT compliance.9
Private by design
Unimus normally requires a connection to its own licensing server. Offline, air-gapped operation is supported only on the Unlimited tier above 1,000 devices.3
rConfig's air-gapped deployment is included on every edition, from the free Core through Enterprise, with no separate tier to buy into.8
Regulated teams evaluating either tool for network segmentation work usually land here from NIS2 compliance or DORA compliance. rConfig's wider security programme, disclosure process and hardening posture are documented on its own security policy page.
Proven at scale
Unimus caps per-device licences at 1,000 before the Unlimited tier. rConfig publishes how it estimates and tests scale instead of asking you to take a tier name on faith.
50,000+ devices, one benchmark run
rConfig's latest benchmark backs up over 50,000 devices in under 21 minutes, with realistic fault conditions included.13
Trusted in 60+ countries
Used across regulated industries, from data centres to remote sites, on the licensing model /device-count-methodology documents.14
What Unimus costs at scale
Unimus list prices, per year, with the first 10 devices free on every tier.3
- Devices500 devicesStandard3,381 USDAdvanced4,753 USD
- Devices1,000 devicesStandard6,831 USDAdvanced9,603 USD
- DevicesAbove 1,000 devicesStandardUnimus Unlimited licence, price on unimus.netAdvancedUnimus Unlimited licence, price on unimus.net
| Devices | Standard | Advanced |
|---|---|---|
| 500 devices | 3,381 USD | 4,753 USD |
| 1,000 devices | 6,831 USD | 9,603 USD |
| Above 1,000 devices | Unimus Unlimited licence, price on unimus.net | Unimus Unlimited licence, price on unimus.net |
rConfig editions and pricing
rConfig's own editions, for the same comparison.7
- EditionCorePrice$0DevicesNo device limit
- EditionStarterPrice$2,999Devicesup to 300 devices
- EditionStandardPrice$4,799Devicesup to 1,000 devices
- EditionEnterprise / MSPPriceCustomDevicesbeyond 1,000 devices
| Edition | Price | Devices |
|---|---|---|
| Core | $0 | No device limit |
| Starter | $2,999 | up to 300 devices |
| Standard | $4,799 | up to 1,000 devices |
| Enterprise / MSP | Custom | beyond 1,000 devices |
Unimus vs Oxidized vs rConfig
Oxidized appears on most shortlists next to Unimus too. The full, cited comparison lives on the Oxidized alternative; the row below is a one-line summary of where the three tools stand next to each other.
- What mattersSource modelUnimusProprietary, closed source.OxidizedOpen source, Apache License 2.0.rConfigV8 Core open source; paid editions on top.
- What mattersFree tierUnimus10 devices, no time limit.OxidizedFree, no device limit.rConfigV8 Core, free, no device limit.
- What mattersDeploymentUnimusOn-premise software, own hardware.OxidizedSelf-hosted collector, YAML and Ruby.rConfigSelf-hosted, web interface and API.
- What mattersCompliance checksUnimusAdvanced tier only.OxidizedNot built in.rConfigStarter tier up.8
- What mattersSupport modelUnimusVendor support, MSP programme available.OxidizedCommunity, maintainer-led.rConfigCommunity on Core, up to 24x7 on Enterprise.
| What matters | Unimus | Oxidized | rConfig |
|---|---|---|---|
| Source model | Proprietary, closed source. | Open source, Apache License 2.0. | V8 Core open source; paid editions on top. |
| Free tier | 10 devices, no time limit. | Free, no device limit. | V8 Core, free, no device limit. |
| Deployment | On-premise software, own hardware. | Self-hosted collector, YAML and Ruby. | Self-hosted, web interface and API. |
| Compliance checks | Advanced tier only. | Not built in. | Starter tier up.8 |
| Support model | Vendor support, MSP programme available. | Community, maintainer-led. | Community on Core, up to 24x7 on Enterprise. |
Moving from Unimus
A safe move runs both tools side by side. Unimus does not publish an export format built for a third-party importer, so plan this as a deliberate rebuild of the device list, credentials and schedules, not a one-command migration.
Export the Unimus device list
Pull your device inventory from Unimus, by its UI export or its REST API: hostname, address, vendor and device type for every device you plan to move.
Recreate credential sets in rConfig
Create at least one credential set in rConfig before adding devices. Unimus credentials do not carry across automatically; treat this as a fresh, deliberate step rather than a copy.
Add the devices to rConfig
Bring the exported list into rConfig, mapping each Unimus device type to an rConfig template and vendor as you go, over the REST API or by hand for a small first group.
Rebuild schedules and test backups
Unimus's polling schedules do not transfer either. Set backup and compliance schedules in rConfig for the same devices, run them, and compare results before retiring anything in Unimus.
Unimus alternative: common questions
Is Unimus free?
Unimus has a free tier: 10 devices, with no time limit. It excludes Configuration and runtime Compliance and SAML/OIDC single sign-on, which are Advanced tier only.
Is Unimus open source?
No. Unimus is commercial, proprietary and closed source. rConfig V8 Core is open source and free to self-host, with no device limit.
Does Unimus work offline?
Unimus normally requires a connection to its licensing server. Offline, air-gapped operation is supported only on the Unlimited tier, above 1,000 devices. The per-device Standard and Advanced tiers need the licensing server.
How much does Unimus cost?
Unimus lists Standard at 6.90 USD and Advanced at 9.70 USD per device per year, billed yearly, capped at 1,000 devices. Above that, an annual Unlimited licence applies, priced on unimus.net. Checked 25 September 2026.
Is there a free Unimus alternative?
Yes. rConfig Core is free, open source and self-hosted, with no device limit, unlike Unimus's 10-device free tier.
Download rConfig Core
How does Unimus compare to rConfig on cost?
Unimus bills per device once you pass 10 licences. rConfig bills a flat annual price per device band instead: Starter to 300 devices, Standard to 1,000, Enterprise custom beyond that. The pricing section above works through both models at 500 and 1,000 devices.
rConfig pricing
Test rConfig with your network
Start with a small device group. Compare the backups, the compliance checks and the OT story before you make a move.
Related reading
Sources, checked 25 September 2026
- Unimus (vendor: NetCore j.s.a., on the market since 2016)
- Unimus, Features (deployment, device and vendor counts, backup, change notifications, config search, runtime auditing, discovery, in-app CLI, REST API, distributed Zones and Remote Cores, encryption, RBAC, MFA, RADIUS, LDAP)
- Unimus, Pricing (free tier, Standard and Advanced list prices, per-device cap, Unlimited tier, offline mode FAQ, MSP programme)
- Unimus community forum, pricing change announcement (Standard/Advanced split and price increase, effective 1 October 2025)
- Unimus blog, Config Compliance in Unimus 2.8 (compliance tier)
- AlternativeTo, Unimus listing (proprietary, closed source)
- rConfig pricing and editions
- rConfig pricing comparison (device allowance, compliance, SSO, air-gapped deployment and distributed collectors by edition)
- rConfig Vector Agent product page (outbound-only connections, OT segment deployment, signed job results)
- rConfig Vector product page (three-tier architecture: central manager, Vector Agent collectors, devices including IoT and OT)
- rConfig Enterprise product page (three-tier architecture at scale, site and tenant isolation)
- rConfig V8 Core product page FAQ (no licence keys, offline and air-gapped deployment, self-hosted)
- rConfig device count methodology (80M+ devices estimate, 50,000-device backup benchmark)
- rConfig About Us (trusted in 60+ countries)
- rConfig docs, REST API
Unimus facts come from unimus.net (Features and Pricing), the Unimus community forum and the Unimus blog, all checked 25 September 2026. rConfig capability and tier claims link to the product documentation and to rConfig pricing, the single source both /pricing and /pricing/comparison read from. No CVE, security-incident or third-party integration partner content is cited on this page.