A multi-tenant connectivity platform that provisions MikroTik routers over WireGuard, authenticates sessions through FreeRADIUS, and sells access through vouchers, plans and Mobile Money.
Small internet providers, hotels, schools and estates sell WiFi on the links they can get - Starlink, mobile broadband, connections behind carrier-grade NAT. None of those give a router a public IP, which is exactly what most hotspot billing tools expect.
The result is usually a patchwork: vouchers in one tool, payments in another, routers configured by hand on site, and no reliable record of who was online, for how long, or what they paid for.
We inverted the usual model. Instead of a controller reaching into the field, every router dials out to the platform over an encrypted WireGuard tunnel and is addressed on a private VPN IP. Nothing is exposed to the public internet and nothing needs port forwarding.
Responsibilities are then split cleanly: MikroTik enforces the network, FreeRADIUS decides access and records accounting, and the Laravel application holds the business rules - tenants, packages, vouchers, payments and policy.
PaalFi generates the router configuration, brings each router onto the tunnel, and keeps hotspot profiles, rate limits and walled-garden rules in step with what an operator sets in the dashboard. Customers buy through a branded captive portal; sessions are authorised by RADIUS with the package's speed and time limits attached, and can be disconnected from the dashboard with a CoA request.
Routers reach the platform on a private VPN address - no public IP, no port forwarding.
Access decisions, accounting and session reconciliation handled through FreeRADIUS.
Generated RouterOS configuration, with an audit of what each router should be running.
Time and data packages, bulk QR vouchers and a branded captive portal.
Plans, subscribers and invoicing for providers selling fixed connections.
Anti-tethering scoring and enforcement, whitelisted devices and access windows.
Paystack, Hubtel and PaalPay drivers, with each tenant charging on its own keys.
Router heartbeats, traffic samples, session state and offline alerts in real time.
PaalFi turns hotspot and subscriber connectivity into a single managed service: routers that can be reached wherever they are installed, access that is authorised and accounted for centrally, and payments that settle to the operator's own account.
WISP and hotspot billing. See plans, features and who it is built for.
View PaalFiA multi-school management platform covering admissions, academics, timetables, results, attendance, fees and communication - with a public website for each school run from the same dashboard.
A self-hosted payment service that sits in front of Paystack and Hubtel, so PaalTech applications create a payment intent once and receive a signed, verifiable result - whichever gateway processed it.
Campus-wide connectivity for a senior high school, combining satellite internet, point-to-point wireless distribution and centrally managed Wi-Fi across classroom blocks, laboratories and staff areas.
Tell us what you are trying to solve. We will tell you plainly whether we can build it, and what it would take.