Carrier-Grade ISP Billing
for Modern WISPs.
Built for MikroTik operators. Automate Safaricom M-Pesa Daraja 2.0 STK push collections, trigger instant FreeRADIUS RFC 3576 CoA reconnects in <150ms, manage ONTs with TR-069 ACS, and launch 0%-commission hotspot portals.
Built for Real-World Operations.
A fast, high-density web application designed for day-to-day network administration.
Engineered for Modern WISPs.
Eliminate slow scripts, manual reconciliations, and fragile cron jobs with native cloud telecom infrastructure.
Instant FreeRADIUS RFC 3576 CoA
<150ms Reconnection SpeedSends native RADIUS Disconnect-Request and CoA packets straight to MikroTik. Expired users are disconnected immediately, and paying clients reconnected in under 150ms.
Automated M-Pesa Daraja 2.0 STK
100% Hands-Free ReconciliationSeamless integration with Safaricom Paybill and Till numbers. When a client pays, their ledger is credited, PPPoE refreshed, and SMS receipt dispatched automatically.
TR-069 ACS Remote ONT Manager
Zero-Touch Optical DiagnosticsCarrier-grade CWMP server for Huawei, ZTE, VSOL and XPON ONTs. Remotely inspect optical power levels, update Wi-Fi SSIDs, and reboot ONTs without site visits.
WireGuard Mesh (CGNAT Bypass)
No Public Static IP RequiredAutomated WireGuard tunnels connect MikroTiks behind Starlink dishes, 4G/5G, or Carrier-Grade NAT with zero packet loss and end-to-end encryption.
0% Commission Hotspot Portals
Keep 100% of Your RevenueModern captive portal templates with 1-tap M-Pesa STK push, QR login, and SMS voucher delivery. RadiusOne never takes a cut of your hotspot income.
Subscriber Self-Care Portal
Web & Mobile PortalSubscribers can check account status, view bandwidth usage, renew subscriptions via M-Pesa, and download stamped PDF receipts directly from their phone.
Branded Captive Portals.
Keep 100% of Your Revenue.
RadiusOne charges zero commission on hotspot sales. All client payments via M-Pesa STK push route directly into your own Safaricom Paybill or Till number.
1-Tap M-Pesa STK
Walk-in clients enter their phone number and receive an instant M-Pesa prompt. Auto-connected in seconds.
QR Code & Vouchers
Print high-density batch voucher tickets with scannable QR codes for kiosks and business venues.
Multi-Theme Templates
Customizable responsive themes ready for MikroTik hotspot directories or RadiusOne Cloud hosting.
Direct Paybill / Till
No intermediary wallets or holding periods. Funds settle directly into your merchant account.
Simple, Transparent Tiers.
No hidden setup costs. Keep 100% of your hotspot voucher revenue with zero commission cuts.
14-Day Trial
Test & EvaluateStarter
Nano & Rural WISPsGrowth
Residential & Estate ISPsPro Scale
Commercial WISPs & FiberNeed more than 500 subscribers or dedicated infrastructure?
We offer custom on-premise FreeRADIUS clustering, dedicated WireGuard gateways, and bespoke billing integrations.
Modern Cloud AAA vs. Legacy Scripts.
A reliable architecture engineered for speed, automation, and operational stability.
| Capability | RadiusOne (Cloud AAA) | Traditional Setup |
|---|---|---|
| M-Pesa Reconnection Speed | <150ms instant (FreeRADIUS RFC 3576 CoA) | 5-15 minute delayed polling scripts |
| Starlink & CGNAT Support | Native WireGuard Mesh (No static IP needed) | Fails without expensive public IP |
| TR-069 ACS ONT Management | Included: Optical power & Wi-Fi control | Manual site visits & technician dispatches |
| Hotspot Platform Fees | 0% Commission (You keep 100% of revenue) | 10% to 20% platform revenue cut |
| Server Reliability & Maintenance | High-availability cloud AAA with daily backups | Local on-premise hardware vulnerable to downtime |
Built For Real Operations.
Hear from network engineers and ISP owners managing thousands of subscribers on RadiusOne.
“Before RadiusOne, our local scripts choked when M-Pesa callbacks piled up at month-end. RadiusOne's FreeRADIUS CoA reconnects users in less than a second. We haven't had a single late-night complaint since migrating.”
Mohamed Abdi
Founder & CTO, Uzair Broadband“The WireGuard mesh capability solved our biggest headache. Our remote towers run on Starlink uplinks without static IPs. One terminal paste and every CCR router was synced directly to RadiusOne cloud AAA.”
David Kimani
Managing Director, Rift Valley Wireless“The TR-069 ACS integration reduced our truck rolls by 70%. We can inspect optical power levels and reboot Huawei and ZTE ONTs remotely from our desk. The captive portals look pristine on mobile.”
Faith Mwende
Head of Operations, Coast Fibre SolutionsTelecom-Grade Protection.
Engineered to safeguard your network credentials, customer privacy, and revenue transactions.
WireGuard ChaCha20-Poly1305
Every MikroTik communicates over encrypted peer-to-peer tunnels without exposing web ports or WinBox to the public internet.
Isolated Multi-Tenant Database
Strict tenant isolation ensures your subscribers, credentials, and financial ledgers are completely quarantined.
Daily Encrypted Cloud Backups
Automated daily AES-256 encrypted backups replicated across distributed Cloudflare R2 storage regions.
Role-Based Access Control (RBAC)
Granular permissions for NOC engineers, field installers, voucher resellers, and accountants with audit logs.
Data Protection Compliant
Full compliance with the Kenya Data Protection Act (2019) and regional telecom privacy regulations.
Anycast Edge & DDoS Mitigation
Captive portals and API webhooks are fronted by Cloudflare Anycast edge networks to absorb traffic spikes.
Frequently Asked Questions.
Answers to common questions about cloud FreeRADIUS, MikroTik sync, and M-Pesa billing.