🌍 Built for African ISPs · 78 Modules · Enterprise-grade

The operating system
for African ISPs.
78 modules — Proximal Payments, RADIUS/PPPoE, NOC, Fiber GIS, VoIP, IPTV and AI insights. Start with what you need. Scale without migrating.

Chromosphere is a fully modular ISP management platform purpose-built for African operators. Proximal bank payments across all Kenyan banks, multi-currency billing, PPPoE/RADIUS, fiber GIS, real-time NOC and AI-driven insights — all in one platform, no integrations required.

See Pricing
Trusted by ISPs across East Africa
No per-subscriber fees
Start in under a day
No lock-in. Cancel anytime.
0
Platform Modules
Unlimited
Subscribers
<50ms
RADIUS Auth
5
Payment Gateways
10
Switch Vendors
100%
API Coverage

Everything on one screen.

Subscriber sessions, incidents, billing pulse, network health — all real-time, all wired together.

app.chromosphere.tech/admin
Chromosphere
NOC Dashboard
LIVE
Subscribers
4,812
↑ +48 this month
MRR
KES 2.4M
↑ +6.2% vs last mo
Uptime
99.6%
30-day rolling
Incidents
7
2 critical open
Active incidents7 open
BGP down — Edge-RTR-05 / AS37090
P1 Network · Alex O.
2m
DDoS 14Gbps — 92.168.12.0/24
P1 Security · Mitigating
11m
Dist-SW-03 CPU > 95%
P2 Infra · Brian M.
24m
Fiber cut — Westlands C3
P2 Field · WO-2847
1h
Core nodes6 devices
Core-SW-01
61% CPU
12ms
Core-SW-02
54% CPU
8ms
Dist-SW-03
High CPU
47ms
Edge-RTR-05
BGP down
!
OLT-NBI-1
312 ONUs
OK
OLT-MBA-2
188 ONUs
OK
Traffic throughput — last 24h⬤ Download   ⬤ Upload
MRR
KES 2,412,800
↑ +6.2% vs last month
Today's collections
KES 487,300
↑ 38 invoices paid
Overdue (30d+)
KES 128,000
↑ 14 accounts
Churn this month
1.4%
industry avg: 3.2%
Recent invoices38 pending
SubscriberPlanAmountStatus
Wanjiru MwangiBusiness 50MbpsKES 8,500
Kamau EnterprisesEnterprise 200MbpsKES 24,000
Njoroge P. KibugiHome 20MbpsKES 3,200Overdue
Amina IbrahimHome 10MbpsKES 1,800Pending
Payment gatewayslive
Proximal InnovationsBank redirect · 214 txns today
StripeCard · 87 txns today
Airtel MoneyDegraded · 12% error rate
BGP peers1 down
RouterPeer ASNPrefixes RxUptimeState
Core-RTR-01AS6453 (Tata)842,31247d 3hEstablished
Core-RTR-01AS3356 (Lumen)710,44112d 8hEstablished
Edge-RTR-05AS37090 (KIXP)Idle
Edge-RTR-05AS328 (Liquid)204,8815d 14hEstablished
Core-RTR-02AS37153 (Safaricom)14,22822d 0hEstablished
Route summary
IPv4 prefixes
from transit peers
1.77M
IPv6 prefixes
from transit peers
238K
RPKI invalid
auto-dropped
14
Sessions down
Edge-RTR-05
1
Flap history (1h)
KIXP flap Liquid warn

One platform. Every module standalone.

Each module ships with its own migrations, models, Filament UI, REST API and service layer. Deploy the full suite or compose exactly what your ISP needs.

🧾
Billing
Billing & Invoicing
Recurring invoices, prorated billing, configurable dunning escalation and automatic subscriber suspension.
Proximal PaymentsStripeAirtel MoneyPDF export
💳
Billing
Payments Gateway
Unified gateway abstraction — M-Pesa STK push, Stripe, Airtel Money, bank transfer. Webhook reconciliation and VAT/eTIMS.
STK pushWebhookseTIMS
🏛️
Billing
Tax Engine
VAT computation, eTIMS fiscal device stub, per-product tax categories, tax-inclusive/exclusive pricing and audit reports.
VATeTIMSTax classes
🏦
Billing
Accounting & Wallet
Subscriber wallet top-up, ledger, credit control, Xero/QuickBooks export, accounting journal and dunning log.
WalletXeroCredit control
📡
Network
RADIUS / AAA
FreeRADIUS integration with CoA, per-plan bandwidth enforcement, hotspot vouchers, PPPoE session tracking and auto-provisioning.
CoA pushPPPoEHotspotGPON
🌐
Network
IPAM
Full IP address management — subnet tree, conflict detection, utilisation heatmaps, VLAN-to-subnet mapping and IPv6 support.
IPv4 / IPv6Conflict checkVLAN map
🔀
Network
Network Topology
Auto-discover topology via LLDP walk, visualise in Cytoscape.js or Leaflet, overlay utilisation heatmaps, latency and DDoS pulses.
LLDP auto-importBGP linksTimeline diff
🔌
Network
Switch Management
Multi-vendor switch control — Cisco, Juniper, Aruba, MikroTik, UniFi, Huawei, Extreme, Dell. VLAN push, golden config, config backup.
10 vendorsLLDPSPANConfig backup
🛣️
Network
BGP Management
BGP session monitoring, peer management, looking glass, route lookup, AS path analysis and session-down incident auto-creation.
Looking glassRoute lookupAS analytics
🔢
Network
NAT & CGN
Carrier-Grade NAT pool management, port block allocation, NAT444 configuration and per-subscriber public IP lookup.
NAT444Port blocksIP lookup
🖥️
Network
DHCP Server
Multi-server DHCP management with pool configuration, lease tracking, DNS server assignment and lease log.
PoolsLeasesDNS
🌊
Network
Flow Analytics
NetFlow/sFlow collector with top-talkers, protocol breakdown, per-subscriber deep analysis and GeoIP threat intelligence.
NetFlow v9sFlowTop talkersGeoIP
Network
L2TP / LNS
LNS server management, L2TP tunnel monitoring, session tracking linked to PPPoE subscribers and health dashboards.
LNS serversTunnelsSessions
🔗
Network
Internet Exchange (IXP)
IXP peering management, peer session monitoring, BGP route policy, traffic analytics and IX dashboard.
PeeringRoute policyTraffic
🛡️
Security
DDoS Protection
Automated DDoS detection with configurable thresholds, BGP blackhole mitigation, scrubbing centre integration and event log.
BGP blackholeAuto-mitigationScrubbing
🔥
Security
Firewall & DPI
Firewall zone/policy management, deep packet inspection rules, application signatures, VPN tunnels and threat log.
ZonesDPI rulesVPN tunnels
🔐
Security
TACACS+ & AAA Audit
TACACS+ server management, per-user privilege levels, auth log, command accounting and compliance reporting.
Auth logPrivilegeAccounting
🔍
Security
Audit & Compliance
Full admin audit trail, data retention policies, GDPR-style purge logs, golden config compliance checks and change management.
Audit logRetentionGolden config
🖥️
Operations
Network Operations (NOC)
Real-time incident management, severity-based escalation, SLA tracking, auto work-orders, SNMP trap receiver and AlertGateway.
P1/P2/P3FSM work ordersSNMP traps
🗺️
GIS
Fiber GIS & vOTDR
Map fiber routes, closures, POPs, FDTs, splitters and ONUs on an interactive Leaflet map. Virtual OTDR fault detection.
Leaflet.jsvOTDRCoverage zonesOLT ports
📶
Monitoring
Bandwidth Monitor
SNMP-based per-interface polling, threshold alerts, 95th percentile billing data and per-subscriber usage caps with SMS alerts.
SNMP polling95th pctUsage caps
🔔
Notifications
Alert & Notification Gateway
Multi-channel alerting engine — SMS via TextSMS/Twilio, email, Slack, WhatsApp. Template-based notification log.
SMSWhatsAppSlackEmail
🤝
CRM
CRM & Sales Pipeline
Kanban sales pipeline, lead tracking, churn risk scoring, automated follow-ups and subscriber lifecycle management.
KanbanChurn scoreLifecycle
😊
CRM
NPS & Loyalty
Net Promoter Score surveys, 6-month trend dashboard, loyalty points engine, rewards catalogue and offer redemptions.
NPS scoreSurveysLoyalty points
🌍
Portal
Customer Self-Service Portal
Subscribers manage plans, pay invoices, track usage, control Smart Home features and raise tickets without calling support.
LivewireProximalSmart HomeTickets
📱
Devices
ACS / TR-069
CPE auto-provisioning via TR-069, remote config push on subscription activate, firmware OTA and session log.
TR-069OTA firmwareAuto-push
💡
Devices
ChromosphereIQ (Smart Home)
Subscriber Smart Home — parental controls, content filtering, app QoS prioritisation, experience scores and threat protection.
Experience scoreDevice pauseContent filter
⚙️
Devices
Zero Touch Provisioning
ZTP profiles and job queue for automated device bootstrap — push base config to new CPE and switches on first boot.
ZTP profilesJob queueProvision log
🤖
AI
AI Insights
Churn prediction, anomaly detection, revenue forecasts, RCA dashboard and AI-driven subscriber experience scoring.
Churn predictionAnomalyForecasting
📊
Reports
Reports & Analytics
Revenue, churn, ARPU and growth analytics. Snapshot exports, PDF reports and scheduled delivery to stakeholders.
RevenueARPUPDF exportScheduled
🏗️
Infrastructure
Infrastructure & Assets
Rack, power and cooling management, data centre layouts, asset lifecycle tracking, assignments and maintenance schedules.
RacksAssetsMaintenance
🔑
Platform
API & Developer Platform
SHA-256 token auth, REST API for subscriber self-care, webhook delivery, scoped permissions and full API request log.
REST APIToken authWebhooks
📞
New · VoIP
VoIP & Telephony
SIP trunk management, DID number inventory, extension registry, CDR billing, call analytics and FreeSWITCH ESL integration.
SIP trunksDID numbersCDRFreeSWITCH
📺
New · IPTV
IPTV
IPTV channel and package management, STB device provisioning, EPG integration and subscriber entitlement control via middleware API.
ChannelsPackagesSTB devicesEPG
🧠
New · SDN
SDN Controller
SDN controller integration (ONOS, OpenDaylight, Ryu), network slice management, flow rule provisioning and programmable fabric control.
ONOSOpenDaylightSlicesFlow rules
📶
New · Wi-Fi
Wi-Fi Management
Access point inventory, SSID configuration, RF profile management, client session log, channel planning and UniFi/controller integration.
APsSSIDsRF profilesClient sessions
🕵️
New · Intel
Threat Intelligence
IOC feed ingestion, threat actor tracking, AbuseIPDB integration, automated MikroTik blocklist push and threat event log.
IOC feedsAbuseIPDBAuto-block
🔒
Security
VPN Manager
WireGuard server and peer management, OpenVPN configuration, VPN tunnel monitoring and per-subscriber VPN entitlement.
WireGuardOpenVPNPeer mgmt
⏱️
New · Speed
Speed Test
Scheduled and on-demand throughput tests, per-subscriber speed history, iPerf3 integration and SLA breach detection.
iPerf3Scheduled testsSLA breach
👁️
Monitoring
Proactive Monitoring
Target monitoring with ICMP/HTTP/TCP probes, configurable alert rules, downtime log, uptime reports and SLA tracking.
ICMP / HTTPAlert rulesDowntime log
📈
New · Capacity
Capacity Planning
Link and port utilisation trend analysis, Holt-Winters forecasting, warning/critical thresholds and automated capacity reports.
ForecastingHolt-WintersReports
🌐
Network
DNS Management
DNS policy and blocklist management, per-subscriber content filtering, query log analysis and recursive resolver integration.
BlocklistsQuery logPer-subscriber
🤝
New · Reseller
Reseller & Wholesale
Wholesale plan pricing, reseller account management, territory assignments, margin control and reseller invoice generation.
Reseller plansTerritoriesMargins
🏢
New · Franchise
Franchise Management
Franchise partner onboarding, territory boundary management, revenue share rules and franchise performance dashboard.
PartnersRevenue shareTerritories
📦
Operations
Inventory & Stock
Equipment inventory, stock movements, van stock per technician, low-stock alerts and asset-to-subscriber assignment tracking.
Van stockMovementsLow-stock alerts
🔄
New · SaaS
SaaS Multi-tenancy
Shared-DB multi-tenant architecture — tenant context, per-tenant module gating, plan-based entitlements and tenant onboarding wizard.
Tenant isolationModule gatingPlans
📋
Operations
Change Management
ITIL-style change requests, CAB approval workflow, automated advance notifications, rollback plans and change calendar view.
CABApprovalsChange calendar
🌡️
Devices
IoT & CPE Telemetry
IoT device management, real-time telemetry ingestion, firmware OTA orchestration, Wi-Fi experience scoring and anomaly detection.
TelemetryOTA firmwareExperience score

Your network.
Real-time.

Every device, session, alarm and ticket on one screen. React before subscribers notice.

chromosphere@noc — live feed
── CHROMOSPHERE NOC ── 2026-06-26 18:34:17 EAT ──────────────────────────────

ACTIVE INCIDENTS
● P1  id:INC-0041  OLT-NAIROBI-02 port 0/1/3 — LOS             ↑ 4m ago  → J.Kamau
● P1  id:INC-0042  DDoS detected 14Gbps on 92.168.12.0/24      ↑ 11m ago → Mitigating
● P2  id:INC-0040  BGP peer AS37168 flapping                    ↑ 24m ago
● P2  id:INC-0039  Fiber cut — Westlands sector C3              ↑ 1h ago  WO-2847

RADIUS SESSIONS
● 2,841 active PPPoE   ● 412 active GPON   ● 0 throttled   ● 7 suspended

NETWORK HEALTH
Core utilisation:  ──────────── 61%   OK
NAIROBI-01 uplink: ████████████ 89%   ⚠ HIGH
MOMBASA-01 uplink: ───────────  44%   OK
KISUMU-01  uplink: ────────     38%   OK

BGP PEERS                     IPAM UTILISATION
● AS37090 ACTIVE  12 routes   10.0.0.0/8   ── 62%
● AS37168 DOWN              192.168.0.0/16 ── 78%  ⚠

BILLING PULSE
Revenue today:   KES 487,320   Overdue: KES 91,200 (38 accounts)
Payments synced:  3m ago         Auto-suspend queue: 5 accounts in 2h
Wallet top-ups: KES 24,600 today

CHROMOSPHEREIQ
Fleet experience score:  81/100  Grade A   Open threats: 12
Managed devices:         1,247              Parental profiles: 384

VOIP STATUS
● 8 SIP trunks active   ● 412 concurrent calls   CDR today: 3,841 records

IPTV PLATFORM
Active STBs:  618   Channels: 94   Package subscribers: 201

SDN / CAPACITY
Network slices: 4 active   Capacity warning links: 2   Forecast breach: NAIROBI-01 in 14d

chromosphere@noc:~$ 

Money in. Automatically.

Multi-gateway payments, smart dunning, proration, VAT compliance — all wired to subscriber status. Revenue in, suspensions automated.

Invoices
Payment Gateways
Dunning Rules
InvoiceSubscriberAmountStatusDue
INV-2847James KamauKES 3,500PaidJun 01
INV-2846Mary WanjikuKES 5,200PendingJun 15
INV-2845Peter OtienoKES 2,800OverdueJun 01
INV-2844Grace NjorogeKES 8,000PaidJun 01
INV-2843Brian MwangiKES 3,500OverdueMay 25
🏦
Proximal Innovations
Bank redirect · All Kenyan banks
Active
💳
Stripe
Card · SEPA · webhooks
Active
📶
Airtel Money
USSD · push payment
Active
🌊
Flutterwave
Card · mobile · bank · webhooks
Active
🏛️
Bank Transfer
Manual reconciliation
Active

Start small.
Grow big.

Every plan runs on the same platform. Activate only the modules you need — upgrade when your ISP scales. No per-subscriber fees.

Starter
KES 25K/mo
Up to 500 subscribers
  • Billing & Invoicing
  • RADIUS / PPPoE
  • Proximal + M-Pesa
  • Customer Portal
  • Basic NOC alerts
  • Fiber GIS, AI, VoIP
Most Popular
Pro
KES 65K/mo
Up to 5,000 subscribers
  • Everything in Starter
  • Fiber GIS & vOTDR
  • Full NOC + IPAM
  • All 5 payment gateways
  • AI Insights & CRM
  • VoIP & IPTV
Enterprise
Custom
Unlimited subscribers
  • All 78 modules
  • SaaS multi-tenancy
  • Reseller & Franchise
  • SDN + BGP management
  • Dedicated onboarding
  • SLA & priority support

All prices exclude VAT. Annual billing available at 20% discount. Module add-ons available on all plans.

What operators say.

★★★★★

"We moved off spreadsheets and three separate billing tools in one weekend. Payment reconciliation via Proximal alone saved us 15 hours a month."

James M.
CEO — Fibre ISP, Nairobi
★★★★★

"The fiber GIS module changed how our field teams work. We can trace a fault to the exact splice point before a technician leaves the office."

Grace N.
Head of Operations — Regional ISP, Kisumu
★★★★★

"We started with just billing and RADIUS. Six months later we activated NOC, IPAM and DDoS protection — all from the same platform, no migrations."

Brian O.
CTO — Fast-Growth ISP, Mombasa

Enterprise-grade.
ISP-native.

🗺️

Fiber GIS & vOTDR

Map every strand of fiber on an interactive Leaflet map. Track POPs, closures, FDTs, splitters and ONUs with GPS coordinates. The virtual OTDR engine detects faults by analysing optical power levels — no physical test equipment needed in the field.

10 Switch Vendors

Cisco IOS/NX-OS, Juniper, Aruba, Extreme, MikroTik, UniFi, Huawei CE, Dell — one interface, full control, golden config compliance.

🔐

Security First

SHA-256 API tokens, encrypted credentials, TOTP 2FA, full audit log, RBAC with Spatie Permissions, TACACS+ and firewall management.

🤖

AI Insights

Churn prediction, anomaly detection, experience scoring, threat intelligence and revenue forecasts — powered by your own live data.

🌍

Built for African Markets

Proximal Innovations bank payments (all Kenyan banks), Airtel Money, Flutterwave, Stripe, Kenya eTIMS VAT compliance, TextSMS Kenya, WhatsApp — not bolted on, native. Five payment gateways, every currency, every mobile money network your subscribers use.

📱

Customer Self-Service

Subscribers manage plans, pay invoices, control Smart Home features and raise tickets — without calling support.

📡

RADIUS & PPPoE

Sub-50ms auth, CoA disconnect/speed-change, hotspot vouchers and automatic GPON provisioning wired to billing events.

🔧

Zero Touch Provisioning

Bootstrap CPE and switches on first boot with ZTP profiles. Auto-push subscriber config on plan activation via ACS/TR-069.

Beyond connectivity.
VoIP. IPTV. SDN.

Chromosphere now ships VoIP telephony, IPTV streaming management and software-defined networking — fully integrated with billing, subscribers and the NOC.

📞

VoIP & Telephony

SIP trunks, DID numbers, extensions, CDR billing and call analytics — all wired to subscriber accounts. FreeSWITCH ESL integration built in.

📺

IPTV Platform

Manage channels, packages and STB devices from one panel. EPG integration, subscriber entitlement control and middleware API provisioning.

🧠

SDN Controller

Programmable fabric management via ONOS, OpenDaylight or Ryu. Network slices, flow rule provisioning and real-time topology control.

🔒

VPN Manager

WireGuard servers and peers, OpenVPN config, tunnel health monitoring and per-subscriber VPN entitlement — managed from the platform.

🔄

SaaS Multi-tenancy

Run Chromosphere as a multi-tenant SaaS. Shared-DB tenant isolation, per-tenant module gating, plan-based entitlements (Starter / Pro / Enterprise), and a tenant onboarding wizard — all ready to deploy. Single-tenant mode remains the default for standalone ISPs.

🌍 Built for African ISPs

Your ISP.
Your modules.
Your control.

Start with billing. Add NOC when you're ready. Activate fiber GIS next quarter. Chromosphere grows with you — one module at a time.

View Pricing Live Demo →

No lock-in. No per-subscriber fees. Cancel anytime.