Features Security Who it's for
Built for MikroTik operators

Run your MikroTik
hotspot. Not your
spreadsheets.

FlexBill is the modern billing and captive-portal platform for Tanzanian ISP operators. Multi-tenant. Voucher-ready. RLS-secured.

Voucher
FB-A1B2C3
Redeemed
Session
10.64.0.42
Connected
Isolated
RLS
Tenant A
Paid
TZS 10,000
Day pass
Router
WireGuard
Online
Voucher
FB-A1B2C3
Redeemed
Session
10.64.0.42
Connected
Isolated
RLS
Tenant A
Paid
TZS 10,000
Day pass
Router
WireGuard
Online
What it does

Four things FlexBill
does for you.

From capturing a customer's voucher code to reconciling monthly revenue across every router you operate — FlexBill handles the whole billing lifecycle.

01

Captive portal & vouchers, ready to go

A branded portal your customers actually enjoy using. Voucher redemption in one tap, package selection, and self-service — no phone calls to your support line.

  • Branded captive portal per workspace
  • Instant voucher redemption
  • Mobile-first design your customers trust
Captive portal
FB-A1B2C3
Voucher accepted.
Day pass unlocked. Connected to Nexus WiFi for 24 hours.
02

Multi-tenant by design

Every ISP gets its own isolated workspace. Row-Level Security is enforced on the database — a query from one tenant can never return another tenant's customers, payments, or routers. Not by convention. By construction.

  • PostgreSQL RLS with FORCE enabled
  • Per-tenant context set inside transactions
  • No BYPASSRLS, ever
Tenant isolation
Tenant A queries customers: 482 rows returned
Tenant B queries customers: 0 rows visible from A's context
Zero cross-tenant leakage
03

MikroTik integration without the headaches

Register routers, push package updates, watch sessions live. FlexBill talks to your MikroTik routers over encrypted WireGuard tunnels — no exposed API ports, no shared passwords.

  • WireGuard peer management per router
  • Router credentials stored as references only
  • Live session visibility across your fleet
Router fleet
mikrotik-001 · 10.64.0.2 · 24h uptime
mikrotik-002 · 10.64.0.3 · 3h uptime
Push package update to all
Queued for 2 routers. Will apply on next heartbeat.
04

Bank-grade security by default

Passwords hashed with Argon2id. Sessions hardened with Secure + HttpOnly + SameSite cookies. CSRF protection on every state-changing request. Tamper-evident audit logs. MFA-ready.

  • Argon2id password hashing
  • Hash-chained audit log
  • Server-side login throttling
Security
All systems secure.
Last login: Dar es Salaam · 2 min ago. No suspicious activity.
Show me the audit chain
128 events verified · chain intact · 0 gaps
0Cross-tenant leaks
Argon2idPassword hashing
RLSEnforced at the DB
MFAReady when you are
Security

We take isolation
seriously.

FlexBill is built for operators who handle real money and real customer data. Every layer assumes a hostile client.

Row-Level Security on every tenant table. Enforced at the database layer, not in application code. A bug in the app can't leak across tenants because PostgreSQL won't return the rows.

RLS
Tenant isolationEnforced, not promised

Argon2id password hashing. Memory-hard, GPU-resistant. Every password is stored as an Argon2id hash with per-user salts. Nothing is stored in plaintext, ever.

PWD
Password safetyIndustry best practice

Hash-chained audit logs. Every login, every change, every sensitive action is written to an append-only log with a cryptographic chain. Tampering is detectable.

LOG
Tamper-evidentEvery event recorded
Who it's for

Built for operators
who run real networks.

If you run MikroTik hotspots, WISPs, or community networks — FlexBill is for you.

★★★★★

"We used to run our hotspot on a spreadsheet and a WhatsApp group. Now customers redeem vouchers themselves and I see every session live."

JM
John MwakalukwaHotspot operator · Dar es Salaam
★★★★★

"Multi-tenant was the reason we chose FlexBill. We run four separate networks and each one is completely isolated — no risk of mixing customer data."

NK
Neema KimaroWISP operator · Arusha
★★★★★

"The WireGuard integration means my routers don't expose any management ports to the internet. That alone was worth switching."

AH
Ahmed HassanNetwork engineer · Moshi

Ready to run your billing
on FlexBill?

Create your workspace today. Free during onboarding. No credit card required.

Create your workspace
Create your workspace