UniFiShield

What is UniFiShield?

UniFiShield acts as a secure proxy layer in front of your UniFi Controller or UDM Pro. It exposes only the endpoints needed for third-party services to authenticate devices — without exposing your real admin credentials or local network.

Benefits

Secure by Design

Third parties never see your real login. Only device-specific API calls are exposed.

No Port Forwarding

Keep your network closed. UniFiShield lets external systems interact without opening ports.

Granular Access

Only the needed endpoints (like MAC authentication) are available. Everything else is blocked.

UDM Pro Friendly

Supports both classic controllers and UniFi OS. Let others safely use your UDM Pro APIs.

How It Works

UniFiShield sits between your controller and the third party system. It proxies and sanitizes all requests.

Use Cases

• Allow a hotspot platform to authenticate guest devices
• Expose UniFi device control to automation tools
• Offer controlled access to your UDM Pro's API
• Collaborate with third parties without compromising network security