diff --git a/tools/run-iwd.sh b/tools/run-iwd.sh
new file mode 100755
index 00000000..caab4677
--- /dev/null
+++ b/tools/run-iwd.sh
@@ -0,0 +1,21 @@
+#!/bin/bash
+
+systemd-run \
+	--pty --wait --collect \
+	--unit=iwd.service \
+	--service-type=dbus \
+	--property=BusName=net.connman.iwd \
+	--property=NotifyAccess=main \
+	--property=LimitNPROC=1 \
+	--property=Restart=on-failure \
+	--property=PrivateTmp=true \
+	--property=NoNewPrivileges=true \
+	--property=DevicePolicy=closed \
+	--property=DeviceAllow=/dev/rfkill\ rw \
+	--property=ProtectHome=yes \
+	--property=ProtectSystem=strict \
+	--property=ProtectControlGroups=yes \
+	--property=ProtectKernelModules=yes \
+	--property=StateDirectory=iwd \
+	--property=ConfigurationDirectory=iwd \
+	./src/iwd $*