Replace seven stacks.
One platform.
Infinite intelligence.
The unified access management platform that replaces seven fragmented stacks with a single high-performance system — from OpenWRT routers to QSDK and RDK-B gateways, from OpenWiFi access points to prplOS mesh nodes, and out to fixed wireless CPE, transport gear and O-RAN A1.
The industry is fragmented.
Operators are paying for it.
Today's wireless management landscape forces operators to stitch together incompatible systems, maintain separate codebases per device platform, and pay per-device royalties for AI features that should be table stakes.
One platform.
Three audiences.
Whether you're putting WiFi in your home, building a managed network product, or running a carrier fleet — Aether has a tier built for you.
Your home.
In your pocket.
Good signal everywhere. Cameras auto-discovered. 3D printer monitored. Backups running. One app, one subscription.
- Mesh WiFi — auto band steering
- NVR — ONVIF cameras, motion alerts
- IoT sensor monitoring
- Encrypted cloud backup
Built by engineers.
For engineers.
API-first. Open source OpenWrt agent, managed platform. Self-hosting under licence on Enterprise. The platform you'd build yourself if you had 3 years.
- ac-client — BSD-3-Clause, OpenWRT opkg
- REST + GraphQL — every action via API
- Managed cloud — EU / US residency
- Full TR-181:2.16 data model
Carrier scale.
Without the AI tax.
333k devices at $0.30 — a fraction of what you pay today. White-label portal, self-service claiming, TMF Open API, SLA-backed uptime at GA. One invoice replaces three vendors.
- White-label subscriber app
- OSS/BSS — TMF638, TMF632
- Self-service device claiming — no truck roll
- Data residency — EU + US regions
One modular high-performance core.
Infinite device reach.
Seven components. One platform.
Complete coverage.
Every protocol.
Zero compromises.
Ten protocols in one binary. Beyond the WiFi CPE stacks, Hermes speaks NETCONF, SNMP and gNMI for transport and backhaul, plus O-RAN A1 and VES for RAN policy and event collection — so the access network and the CPE fleet live in the same control plane.
Not just WiFi.
The whole access edge.
Fixed wireless and mobile access sit in the same control plane as the CPE fleet — so a subscriber complaint can be traced from the home, through the backhaul, to the radio without leaving one system.
Not every managed device
is a router.
A sensor on a mountainside, a camera event, a Zigbee hub in a living room and a subscriber’s access point are all just devices with identity, health and telemetry. Aether onboards them through the same control plane, into the same device list, under the same tenancy and audit rules — so an operator does not buy a second platform to manage the things that are not access points.
GlacierAI — early warning for glacial hazards
Himalayan glacial lake outburst floods and ice-rock collapses arrive with minutes of warning, in valleys that cross national borders. GlacierAI puts a purpose-built solar sensor node on the face itself — seismic, 60 GHz surface radar and GNSS on one board, with a secure element holding the per-node key — and Aether is the platform behind it.
Nodes publish over MQTT on mutual TLS. Aether ingests, stores, correlates across stations, triangulates the source from arrival times, and routes the alert to civil authorities on both sides of a border — with an audit record of who was told and when. This is the whole IoT path in production, not a slide: ingest, storage, alert routing, API and dashboard.
Status: the ingest-to-alert path runs in production and is proven end to end against the firmware’s real wire format. Field nodes are not yet deployed on a mountain — when they are, we will say where.
Every access point
is already a sensor.
A person walking between two radios changes the multipath between them, and the link’s signal moves several dB from sample to sample. A still room does not do that. Aether now reads presence from the links every managed device already maintains — mesh backhaul and associated clients — with no extra radio, no extra traffic and no camera. It ships in the device agent, and it is off until the household turns it on. Motion, then falls, breathing and heart rate as candidates — each with a confidence, none of them a medical device.
From the channel to the dashboard
Devices report the sensing tree over TR-369 / USP as ValueChange notifications, so the controller stores it through the same path as every other parameter. Aether shows a chip row per device with RSSI and CSI side by side, marks motion on the topology map per link and per direction, keeps a 24-hour strip of transitions with the source recorded, and exposes an events API filtered by sensor.
On the same channel, over half a minute of a link that is not moving, the agent now estimates a breathing rate and a heart rate and raises a fall candidate: a large transient that ends in nobody getting up. Breathing is read from CSI magnitude; heart rate from carrier phase, because a chest wall moves millimetres and at 5 GHz that is about six degrees of phase and almost nothing of power. Each estimate ships with its confidence, and every surface that renders them says what they are: experimental candidates, not a medical measurement. Nothing on the controller alerts, escalates or records them as a clinical observation.
Status: running on our four-node lab mesh since 2026-09-21; CSI on the QCN9074 radios that can capture CFR, RSSI on all of them; vitals and fall candidates in ac-client r40 with the controller views merged 2026-09-22. First observation on motion: the closest pair flips readily and the longer links are quiet — whether that link is over-sensitive or the office is busy needs a controlled walk test, which is next. A vitals estimate needs a still subject inside the link’s own path, which a mesh link between two rooms may never have.
Most parental controls ask nicely.
Ours drop the packet.
Nearly every “parental control” in this market is a DNS blocklist. DNS filtering is a suggestion: encrypted DNS, a hardcoded resolver, a QUIC connection or a raw IP walks straight past it, and the dashboard still reports the block as applied. Aether compiles policy into the router’s own kernel, per device, and then asks the router what it actually dropped.
Enforcement depth depends on the device: in-kernel app blocking requires a supported OpenWRT, QSDK, prplOS or OpenSync image. On other platforms Aether applies the DNS-layer control and reports the difference rather than hiding it.
You cannot govern
what you cannot see.
Blocking is the last step. Before it comes knowing what is actually on the network — which applications, on whose device, at what hour, carrying what risk. Aether classifies traffic on the router itself and receives only the verdict, so the platform learns what an application is without the packets ever leaving the home.
Visibility depth follows the image: platforms with a native classifier report full per-flow application and risk data, and Aether states plainly what a given device can and cannot see rather than presenting a partial picture as a complete one.
Every device platform.
One control plane.
We ship one agent — ac-client, for OpenWRT and QSDK-derived images. Every other platform here already runs its own, and Aether terminates what is already on the device. Running something not listed? Firmware development is our other business — OpenWRT, OpenWiFi, wlan-ap, RDK-B and QSDK, plus camera and IoT firmware on embedded Linux. Agent implementation, platform HALs and full firmware builds for OEM, ODM and custom hardware, priced per device.
Why operators choose Aether
over the alternatives.
| Capability | Aether | OpenWiFi | Xmidt | Cisco Meraki | Juniper Mist | Plume Cloud | Nokia Altiplano |
|---|---|---|---|---|---|---|---|
| Open source OpenWrt agent | ✓ | ✓ | ✓ | ✗ | ✗ | ✗ | ✗ |
| OpenWiFi / OpenWrt | ✓ | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ |
| QSDK support | ✓ | ✗ | ✗ | Partial | ✗ | ✗ | Partial |
| RDK-B support | ✓ | ✗ | ✓ | ✗ | ✗ | ✓ | ✗ |
| prplOS / EasyMesh | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | Partial |
| AI RF optimization | ✓ | ✗ | ✗ | ✓ | ✓ | ✓ | Partial |
| Federated ML | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| IoT fingerprinting | ✓ | ✗ | ✗ | ✓ | ✓ | ✓ | ✗ |
| DNS content filtering | ✓ | ✗ | ✗ | ✓ | ✓ | ✓ | ✗ |
| Subscriber mobile app | ✓ | ✗ | ✗ | ✗ | ✗ | ✓ | ✗ |
| NETCONF / YANG | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| SNMP (v1/v2c/v3) | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| gNMI streaming telemetry | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | Partial |
| O-RAN A1 / VES | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Cellular / FWA CPE (RSRP, RSRQ, SINR) | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | Partial |
| All 4 USP MTPs (WS, MQTT, STOMP, CoAP) | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| O-RAN O1 (NETCONF-backed) | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | Partial |
| Post-quantum TLS | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| TMF Open API (BSS/OSS) | ✓ | ✗ | ✗ | Partial | Partial | ✗ | ✓ |
| On-premise deployment | Licensed | ✓ | ✓ | ✗ | ✗ | ✗ | ✓ |
| Per-device SaaS fee | None | None | None | ~$6–18/mo | ~$4–12/mo | ~$2–5/mo | ~$3–8/mo |
Every Aether row ships today. Licensed means available under separate licence. Competitor pricing is list-price estimate; verify against your own contracts.
8 phases to full parity.
Running today. Hardening for scale.
Built on the right foundations.
From the ground up.
Simple, transparent pricing.
No per-device AI tax.
Founding-partner pricing. These rates are locked for the life of your contract. Start today with a 7-day free trial — cancel any time.
- ✓ Up to 5 devices
- ✓ Aether Home app
- ✓ Aegis DNS filtering
- ✓ IoT device identification
- ✓ Parental controls
- ✓ Network map & speed test
- ✓ All 10 protocols (Hermes)
- ✓ Meridian mesh management
- ✓ Pheme event delivery
- ✓ Post-quantum TLS
- ✓ Managed cloud — EU / US residency
- ✓ Business-hours email support
- ✓ Everything in Operator
- ✓ Prometheus AI/RF optimizer
- ✓ Argus IoT fingerprinting
- ✓ Aegis content filtering
- ✓ OpenSync native port
- ✓ Aether Home white-label
- ✓ 99.9% SLA at GA + priority support
- ✓ Everything in Pro
- ✓ Volume wholesale rate
- ✓ Fleet-wide federated ML
- ✓ Dedicated onboarding & tuning
- ✓ 99.95% SLA at GA
- ✓ Everything in Pro
- ✓ TMF Open API integration
- ✓ Federated ML fleet-wide
- ✓ OEM / ODM firmware — OpenWRT, RDK-B, QSDK
- ✓ OEM / white-label branding
- ✓ Dedicated engineering pod
- ✓ 99.99% SLA at GA + 24/7 support