Features
Key capabilities of the ISPBills platform — billing, network, monitoring, and more
ISPBills is a comprehensive ISP management platform that unifies billing, customer operations, network provisioning, real-time monitoring, support, and financial reporting into a single panel. Built for broadband, wireless, hotspot, and fibre operators of all sizes, it covers every stage of the subscriber lifecycle — from registration and package assignment through automated billing, online collections, reseller distribution, device monitoring, complaint tracking, and regulatory reporting. With over 400 built-in features, ISPBills eliminates the need for separate tools across your operation.
- All-in-one management — customers, billing, and network operations from a single panel
- Multi-service support — PPPoE, Hotspot, Static IP, and custom service models
- Real-time monitoring — routers, wireless devices, OLTs, and ONUs
- Online payments — bKash, Nagad, SSL Commerz, ShurjoPay, Aamarpay, Easypayway, WalletMix, Razorpay, and BdSmartPay
- Reseller ecosystem — operators, sub-operators, managers, NOC users, and card distributors
- Automation — billing, suspension, notifications, and provisioning run automatically
- Comprehensive logs — activity, router, authentication, and suspension audit trails
- Open API — REST API v1 and v2 with webhook support for custom integrations
Customer Management
ISPBills manages the complete customer lifecycle — from registration and activation through billing, suspension, and deletion — with full audit trails at every step.
Service models
ISPBills supports multiple service models from a single system:
| Service Model | Description |
|---|---|
| PPPoE | Point-to-Point Protocol over Ethernet — the standard for broadband ISPs |
| Hotspot / WiFi-Zone | Captive portal authentication for public WiFi and hotspot zones |
| Static IP | Dedicated IP assignment for corporate and premium customers |
| Other services | Cable TV, IPTV, or any custom service type |
Customer statuses
Each customer progresses through clearly defined statuses:
| Status | Description |
|---|---|
| Active | Service is live; the customer is authenticated and connected |
| Suspended | Service paused due to non-payment or manual action; can be reactivated |
| Disabled | Account administratively disabled; requires manual restoration |
| FUP | Fair Usage Policy applied; speed reduced after exceeding the data cap |
| Deleted | Soft-deleted; can be restored from the deleted-customer archive |
Registration and onboarding
- Operator-created accounts — staff register customers with mandatory-field validation, duplicate checking (username, mobile, MAC), package assignment, and billing profile selection
- Customer self-registration — subscribers sign up through the online portal with mobile OTP verification
- Temporary / trial accounts — create time-limited trial accounts with temporary packages and billing profiles
Customer data and profiles
- Custom fields — define ISP-specific data fields beyond the standard profile (National ID, house number, road, thana, district, etc.)
- Customer zones — group subscribers by geographic area for reporting, billing, and broadcast targeting
- Parent–child accounts — link related customer accounts for family or business groupings
- MAC address binding — bind a customer to a specific device MAC address for authentication security
- Online / offline status — see which customers are connected in real time with last-seen timestamps
- Sales notes — attach sales comments and annotations to customer records
Bulk operations
| Operation | Description |
|---|---|
| Excel import | Upload customer data from Excel/CSV files with field mapping |
| MikroTik import | Sync PPPoE secrets, IP pools, and PPP profiles directly from your router |
| External instance import | Migrate subscribers from another ISPBills instance |
| Bulk update | Batch-edit customer attributes across selected records |
| Bulk MAC bind | Bind MAC addresses for multiple customers at once |
| Multiple customer edit | Edit several customer records simultaneously |
| Bulk export | Download customer data for external analysis |
Deleted customer management
Deleted customers are soft-deleted and retained in the archive. You can search, view, and restore any deleted customer along with their billing and payment history.
BTRC compliance
Generate regulatory reports for the Bangladesh Telecommunication Regulatory Commission (BTRC) directly from the platform.
See Customers for the full guide.
Billing & Invoicing
ISPBills automates the full billing lifecycle — from bill generation and invoice delivery through payment processing and service activation.
Billing profiles
Billing profiles control how and when customers are billed:
| Setting | Description |
|---|---|
| Billing due date | Day of the month when bills are due |
| Auto-bill | Enable or disable automatic bill generation |
| Grace period | Number of days after the due date before auto-suspension |
| Billing term | Billing interval configuration (daily or monthly) |
| Minimum validity | Minimum package validity in days |
| Discount | Percentage or fixed discount applied to bills |
You can create multiple billing profiles and assign them to different customer groups or operators. Profiles can be bulk-replaced across all assigned customers when policies change.
Billing types
| Type | Description |
|---|---|
| Monthly | Standard monthly billing on the configured due date |
| Daily | Per-day billing for daily-rate packages |
| Free | No billing — for courtesy or promotional accounts |
Bill generation
- Automatic monthly billing — bills are generated on schedule for all eligible customers
- Manual bill generation — generate a bill for an individual customer with a runtime invoice preview
- Bulk bill management — generate, delete, or manage bills in bulk
- Runtime invoice preview — compute an invoice preview without persisting, showing package price, VAT, discounts, and payable amount
- PDF invoices — generate and download professional PDF invoices
Fair Usage Policy (FUP)
Configure data caps with automatic enforcement:
- Set a data limit per package
- When the limit is exceeded, the customer is moved to a reduced-speed tier automatically
- Optionally reassign the customer to a different IP pool during FUP
- Service returns to normal speed when the next billing cycle begins
Advance payment and auto-debit
- Customers can maintain an advance payment balance on their account
- When a bill is generated, the system can auto-debit the advance balance to pay the bill
- Partial payments are supported — if the balance is less than the bill amount, a new bill is created for the remainder
VAT and tax
- Enable VAT collection per operator with configurable VAT profiles
- VAT is calculated and displayed on invoices automatically
- Track VAT collections with dedicated reporting
Package management
- Create packages with name, speed, price, data limit, and billing rules
- Organize packages with a parent–child hierarchy for master packages and operator-specific variants
- Bulk replace a package across all assigned customers via a background job
- Link packages to PPPoE profiles for automatic RADIUS attribute assignment
- Set custom pricing per customer to override the standard package price
See: Bills and Payments, Payment Gateways, Recharge Card
Payment Processing
ISPBills supports multiple payment channels — from cash collection and recharge cards to a wide range of online payment gateways.
Payment methods
| Method | Description |
|---|---|
| Cash payment | Operator or field staff manually records a cash payment |
| Online payment | Customer pays via the self-service portal through a payment gateway |
| Recharge card | Customer enters a voucher PIN for self-service top-up |
| Auto-debit | Automatic deduction from the customer's advance payment balance |
| Send money | Inter-operator fund transfer |
Payment gateways
| Gateway | Region | Description |
|---|---|---|
| bKash | Bangladesh | Mobile financial service — Checkout, Tokenized, and Legacy modes |
| Nagad | Bangladesh | Mobile financial service |
| SSLCommerz | Bangladesh | Multi-method payment gateway |
| ShurjoPay | Bangladesh | Online payment gateway |
| Aamarpay | Bangladesh | Online payment gateway |
| EasyPayWay | Bangladesh | Online payment gateway |
| WalletMix | Bangladesh | Multi-wallet aggregator |
| BdSmartPay | Bangladesh | Online payment gateway |
| Razorpay | India | International payment gateway |
Each gateway is configured per operator and can be used for both customer payments and operator subscription payments.
Payment processing pipeline
When a payment is received (online or cash), ISPBills automatically:
- Validates and records the payment
- Deducts gateway service charges (if applicable)
- Clears the outstanding bill
- Updates the customer's service expiration date
- Reactivates the customer if previously suspended
- Reconnects the PPP session on the router
- Sends a payment confirmation via SMS, WhatsApp, or email
- Records the transaction in the accounting ledger
Payment verification
- Automatic recheck — pending online payments are re-verified with the gateway every 30 minutes
- Manual verification — operators can manually verify any payment against the gateway's records
Payment links
Generate unique payment links for individual customers and broadcast them via SMS or WhatsApp to selected customer groups — enabling one-tap bill payment.
Payment management
- View, filter, and search all payments by type, period, gateway, or collector
- Edit or reverse payments when corrections are needed
- Download payment records for external reconciliation
See: Bills and Payments, Payment Gateways
Network Management
ISPBills integrates directly with your network infrastructure for provisioning, monitoring, and troubleshooting — going well beyond billing into day-to-day network operations.
MikroTik router integration
ISPBills communicates directly with MikroTik routers via the RouterOS API:
| Operation | Description |
|---|---|
| Router management | Add, edit, and remove routers with API credentials |
| Live monitoring | Real-time CPU, RAM, uptime, firmware, interface traffic, and active PPP sessions |
| PPP profile push | Push PPPoE profiles directly to routers |
| Customer disconnect | Disconnect and reconnect PPP sessions remotely |
| Database sync | Sync PPP secrets, IP pools, and profiles from the router to ISPBills |
| Query router | Execute read queries against the router via the API |
| Router logs | View MikroTik system logs from the ISPBills panel |
| Traffic monitoring | Per-interface PPPoE traffic monitoring |
| API status check | Scheduled health checks for all router API connections |
PPPoE profile system
PPPoE profiles define bandwidth and IP allocation for your subscribers:
- Create and manage profiles with speed limits and IP pool assignments
- Link profiles to IPv4 and IPv6 pools for automatic IP assignment
- Choose between static and dynamic IP allocation modes
- Bulk replace profiles across all assigned customers
- Profiles are pushed to both the router and RADIUS simultaneously
FreeRADIUS integration
ISPBills operates as a management layer on top of FreeRADIUS:
- Manages RADIUS check attributes (passwords, authentication types)
- Manages RADIUS reply attributes (speed limits, framed IP, pool assignments)
- Manages user-to-group assignments and group-level attributes
- Processes RADIUS accounting data for session tracking and usage reporting
- Scheduled tasks keep RADIUS data synchronised — stale sessions are cleaned, accounting records are archived, and the service is periodically restarted
IP address management
| Feature | Description |
|---|---|
| IPv4 pools | Create pools from CIDR subnets with automatic address generation |
| IPv6 pools | Dual-stack support with IPv6 pool management |
| Static IP assignment | Assign dedicated IPs to individual customers |
| IP re-allocation | Bulk re-assign IPs when pools or profiles change |
| Pool replacement | Replace one pool with another across all linked profiles |
| Suspended user pool | Dedicated IP pool (walled garden) for suspended customers |
Suspension redirect
Configure MikroTik to redirect suspended customers to a branded suspension portal page with payment gateway links, enabling self-service reactivation.
Network topology
Build and view a visual network topology map with custom nodes and links to document your infrastructure layout.
See: NOC Dashboard, Monitoring
OLT/ONU Fibre Management
ISPBills provides built-in management for fibre-to-the-home (FTTH) networks with support for multiple OLT brands.
Supported OLT brands
| Brand | Sync Method |
|---|---|
| VSOL | Telnet/SSH CLI |
| DBC | Telnet/SSH CLI |
| Huawei | SNMP / CLI |
| ZTE | SNMP / CLI |
| BDCOM | Telnet/SSH CLI |
OLT features
- OLT registration — add OLTs with IP, credentials, SSH/Telnet/SNMP settings, and link to a NAS router
- Automated ONU discovery — every 15 minutes, ISPBills syncs with each OLT to discover and update ONU records
- ONU inventory — view all ONUs with status, signal level, distance, temperature, and last sync time
- Customer-to-ONU mapping — automatically link customers to their ONU devices by matching MAC addresses from RADIUS accounting
- Running config download — retrieve the running configuration from supported OLT brands
- VLAN discovery — discover and cache VLAN assignments with automatic refresh
- OLT logs — view operational logs per OLT
See: OLT Management
VPN Management
ISPBills can provision and manage VPN accounts for your customers across multiple VPN technologies.
Supported VPN types
| Type | Description |
|---|---|
| WireGuard | Modern, high-performance VPN — automatic key pair generation, server push, and config file creation |
| OpenVPN | Certificate-based VPN — automatic certificate generation (CA, client), .ovpn config file creation |
| MikroTik PPP | VPN accounts provisioned as PPP secrets on MikroTik routers with RADIUS integration |
| SSTP | Secure Socket Tunneling Protocol VPN accounts |
VPN capabilities
- Server management — register VPN servers with encrypted API keys and CA certificates
- Account provisioning — create VPN accounts linked to customers and operators
- IP pool management — manage separate server and client IP pools for VPN
- Config download — customers and operators can download their VPN configuration files
- API access — VPN accounts and configs are available via both API v1 and v2
Reseller & Operator Hierarchy
ISPBills supports a multi-tier operator model that scales from a single ISP to a national franchise network with resellers, sub-resellers, and field staff.
Role hierarchy
| Role | Creates | Manages | Financial scope |
|---|---|---|---|
| Super Admin | Group admins, developers | All tenants | Platform-level |
| Group Admin (ISP) | Operators, sub-operators, managers, NOC users, packages, billing profiles | Own tenant | Full accounting, subscription bills |
| Operator (Reseller) | Sub-operators, managers, customers, recharge cards | Own customers | Customer payments, partial accounting |
| Sub-Operator | Managers, customers, recharge cards | Own customers | Customer payments |
| Manager | — | Assigned customers | Cash collection only |
| NOC User | — | Network infrastructure (no financial data) | No financial access |
| Card Distributor | — | Card sales | Commission tracking |
Account types
| Type | Description |
|---|---|
| Credit | Operator has a credit limit and can operate up to that limit |
| Debit (Prepaid) | Operator maintains a prepaid balance; operations are blocked when the balance reaches zero |
Operator features
- Self-provisioning — new operators can self-register with a provisioning key
- Balance management — add funds, transfer between accounts, track balances
- Credit limits — set and enforce credit limits for operators and sub-operators
- Customer transfer — move customers between operators
- Operator suspension — suspend operators who fail to settle; access is blocked until resolved
- Cascade deletion — when an operator is deleted, all associated customers, packages, billing profiles, accounting records, and gateways are cleaned up automatically
- Configurable permissions — grant granular special permissions to operators beyond their role defaults
- Notice broadcasting — broadcast messages to all operators under your hierarchy
SMS, WhatsApp & Email Notifications
ISPBills provides a unified notification system that routes messages to customers via SMS, WhatsApp, or email based on operator preference.
SMS
Supported SMS gateways:
| Gateway |
|---|
| ADN SMS |
| BulkSmsBD |
| BdSmartPay |
| Elitbuzz Family |
| Robi SMS API |
| SmsInBD |
| SmsNet |
| SSL Wireless |
| 24SmsBD |
SMS capabilities:
- Single SMS — send one-to-one messages to any customer
- SMS broadcast — send bulk messages to filtered customer groups via a background job
- Event-triggered SMS — configure templates that fire automatically on billing events
- SMS generator — template engine with variable substitution (customer name, amount, date, etc.)
- SMS billing — track SMS usage per operator with automatic bill generation every 6 hours
- Balance alerts — daily check for operators with low SMS balance
- Gateway cascading — if an operator has no SMS gateway configured, the system falls back to the parent operator's gateway, then to the system default
Supported WhatsApp providers:
| Provider | Description |
|---|---|
| Meta (Official) | Meta Cloud API / Graph API |
| Twilio | Twilio WhatsApp Business API |
| 360dialog | 360dialog WhatsApp API |
| Unofficial | Custom HTTP API |
WhatsApp capabilities:
- Text and template messages — send free-form text or pre-approved templates with variable components
- Broadcast — send WhatsApp messages to filtered customer groups
- Event-triggered messages — automatic WhatsApp on payment, suspension, activation, expiration, and more
- OTP delivery — send OTP codes via WhatsApp for customer verification
- Webhook handling — receive and process incoming WhatsApp messages
- Message history — full send history with delivery status tracking
- Per-operator SMTP — each operator configures their own SMTP server (host, port, encryption, credentials)
- Template system — create email templates with
{{variable}}placeholders for each event type - Event-triggered emails — automatically send emails on payment, suspension, activation, and other events
- Background sending — emails are dispatched via background jobs to avoid blocking the UI
- Full history — view sent email history with delivery status
Notification events
| Event | SMS | ||
|---|---|---|---|
| Payment received | ✅ | ✅ | ✅ |
| Customer suspended | ✅ | ✅ | ✅ |
| Customer activated | ✅ | ✅ | ✅ |
| Expiration warning | ✅ | ✅ | ✅ |
| Due date reminder | ✅ | ✅ | — |
| Welcome message | ✅ | ✅ | ✅ |
| Payment link | ✅ | ✅ | — |
Telegram emergency alerts
Configure a Telegram bot for emergency notifications — receive critical alerts directly in your Telegram chat with webhook integration.
Monitoring & Status
ISPBills offers extensive monitoring capabilities for routers, wireless devices, fibre equipment, and network services.
Zabbix integration
Connect your Zabbix monitoring server to ISPBills:
- Register one or more Zabbix servers with API credentials
- Auto-sync hosts and active problems every 5 minutes
- View Zabbix host status, availability, and active alerts directly in the ISPBills dashboard
- Track problem severity and resolution status
Status check system
Monitor any network endpoint with built-in multi-protocol checks:
| Check Type | Description |
|---|---|
| HTTP / HTTPS | Web endpoint monitoring with body content matching |
| Ping (ICMP) | Basic host reachability |
| TCP | TCP port open check |
| DNS | DNS resolution verification |
| SSL | SSL certificate validation and expiry monitoring |
| SNMP | SNMP agent availability |
Status check features:
- Checks run every minute with overlap protection
- Results include response time, status code, and error details
- Automatic incident tracking — incidents are created on failure and resolved on recovery
- Auto-monitor — status checks are automatically created when you add new devices (routers, OLTs)
- Public status page — share a branded, unauthenticated status page with your customers showing uptime percentage, average response time, recent incidents, and announcements
Ubiquiti device monitoring
- Monitor Ubiquiti airMAX devices with live signal strength, noise, CCQ, TX/RX rates, CPU, memory, uptime, and connected station count
- Audit logging for all device access attempts
Cambium device monitoring
- Monitor Cambium ePMP/PMP wireless devices with signal, noise, SNR, CCQ, TX/RX rates, CPU, memory, uptime, and connected stations
- Authenticate via the Cambium REST API
NetFlow traffic analysis
- Ingest NetFlow records from an external collector with per-tenant scoping
- GeoIP enrichment — automatically resolve geographic information for traffic flows
- Anomaly detection — background job detects unusual traffic patterns
- Configure alert thresholds and retention policies per operator
- Expired records are automatically purged daily
RRD traffic graphs
- Automatically create RRD databases for per-interface traffic monitoring
- Generate traffic graph images updated every 5 minutes
- View historical traffic trends per router interface
NOC dashboard
A dedicated Network Operations Centre dashboard providing a network-wide health overview with real-time device status, active problems, and traffic summaries.
Network topology map
Build a visual network topology with custom nodes and links to document and share your infrastructure layout.
See: NOC Dashboard, Monitoring, OLT Management
Accounting
ISPBills includes a built-in double-entry accounting system that automatically records financial transactions generated by billing and payment activity.
Chart of accounts
- Each operator has a set of accounts with balances
- Accounts track the relationship between the account provider (who funds) and the account owner (who uses)
- View running balances and full transaction history per account
Cash in and cash out
All financial movements are recorded as cash-in or cash-out transactions:
Cash in sources:
| Source | Description |
|---|---|
| Customer payments | Payments received from subscribers |
| Subscription payments | Operator subscription fees |
| Admin credits | Manual balance credits |
| Online recharges | Debit account top-ups via payment gateways |
| Affiliate commissions | Commissions earned through referrals |
Cash out sources:
| Source | Description |
|---|---|
| Customer payments (outflow) | Payments forwarded to upstream operators |
| Subscription payments | Operator subscription fees paid |
| Exchange transfers | Balance transfers between accounts |
| Online account payments | Payments made via online gateways |
Journal and ledger
- Journal — unified transaction view combining all cash-ins and cash-outs with bank transaction IDs
- Ledger — per-account view showing a running balance for each account
Expense tracking
Track operational expenses with a category and subcategory system:
- Create expense categories and subcategories
- Record expenses with descriptions, amounts, and dates
- Compare income vs. expenses for profitability analysis
Reports
| Report | Description |
|---|---|
| Accounts receivable | Money owed to the ISP by postpaid operators |
| Accounts payable | Prepaid operator credit balances |
| Daily report | Daily cash-in/cash-out totals |
| Monthly report | Monthly financial summary |
| Account statement | Transaction history per account |
| Income summary | Revenue overview by operator |
| Yearly summaries | Annual totals for cash-in, cash-out, expenses, operator income, and card distributor payments |
| Bills vs. payments chart | Hourly-updated chart comparing billed amounts vs. collected payments |
| Pending transactions | Outstanding transactions awaiting approval |
See: Accounts, Income and Expenses
Recharge Card Distribution
ISPBills includes a complete recharge card system for voucher-based self-service payments.
How it works
- Create cards — operators generate recharge card batches with unique PINs, linked to specific packages
- Assign to distributors — cards are assigned to card distributors for physical or online sale
- Customer recharge — customers enter their card PIN in the portal or app; the system validates the PIN, matches the package, processes the payment, and activates service
Card distributor portal
Card distributors have their own dedicated login and dashboard:
- View assigned cards and earnings
- Search customers by mobile number
- Pay bills and recharge accounts on behalf of customers
- View payment and recharge history
- Download printable voucher sheets
Card management
- Duplicate PIN detection — background job ensures no duplicate PINs exist across batches
- Usage tracking — track which cards are unused, used, or expired
- Commission tracking — record payments and commissions for distributors
- Annual summaries — yearly payment totals per distributor
See: Recharge Card
Hotspot System
ISPBills supports captive portal (hotspot) authentication for public WiFi zones:
- Hotspot login — customers authenticate through a captive portal with username and password
- Hotspot packages — separate package management for hotspot customers (daily and monthly)
- Hotspot recharge — recharge hotspot accounts directly
- Hotspot RADIUS attributes — manage hotspot-specific RADIUS check and reply attributes
- Hotspot logs — track all hotspot authentication events
- Package change — change packages for hotspot customers with automatic RADIUS updates
- Walled garden — configure allowed destinations for unauthenticated hotspot users
Complaint Management
ISPBills includes a department-based complaint management system for tracking and resolving customer issues.
- Create complaints — operators or customers can create complaints linked to customer accounts
- Department routing — route complaints to the appropriate department for resolution
- Category management — organise complaints into configurable categories
- Comments and notes — add internal comments and notes to track progress
- Acknowledgement — acknowledge receipt of a complaint
- Financial ledger — track complaint-related costs with a dedicated ledger
- Archiving — archive resolved complaints while keeping them searchable
- Reports — generate reports on complaint volumes, resolution times, and department performance
- Customer portal — customers can create and track complaints from the online portal
- Statistics charts — visual charts for complaint trend analysis
See: Complaint Management
Automation & Scheduled Tasks
ISPBills runs dozens of automated tasks that reduce manual work across the entire operation:
| Task | Frequency | Description |
|---|---|---|
| Auto-billing | Monthly / Daily | Generate bills automatically based on billing profiles |
| Auto-suspension | Daily | Suspend unpaid customers after the grace period expires |
| Auto-debit | Monthly | Debit advance payment balances against outstanding bills |
| FUP activation | Daily | Apply speed throttling when customers exceed data limits |
| Due date reminders | Daily | Send SMS/WhatsApp reminders before bills are due |
| Expiration notices | Daily | Alert customers before their service expires |
| Payment recheck | Every 30 min | Re-verify pending online payments with gateways |
| OLT/ONU sync | Every 15 min | Discover and update ONU records from OLTs |
| Zabbix sync | Every 5 min | Sync host and problem data from Zabbix |
| Status checks | Every minute | Run multi-protocol health checks on monitored endpoints |
| RRD updates | Every 5 min | Update traffic graphs |
| RADIUS maintenance | Every 3–15 min | Relay accounting, clean stale sessions, archive old records |
| Router API check | Daily | Verify router API connectivity |
| SMS billing | Every 6 hrs | Generate SMS usage bills for operators |
| Data cleanup | Monthly | Clean old logs and stale data |
| Backups | Daily | Automated database and customer data backups |
| Yearly summaries | Daily | Generate annual financial summaries |
For full details on configuring automation, see Automation.
API Access
ISPBills provides a full REST API for integrating with external systems, building custom dashboards, and automating workflows.
API v1 (Bearer Token)
Authenticate with an operator's API token. Endpoints cover:
| Area | Capabilities |
|---|---|
| Customers | List, create, view, and action customers |
| Billing | Invoices, bills, subscriptions, and payments |
| Network | Routers and OLTs |
| Monitoring | Ubiquiti, Cambium, access logs, ONUs, status checks, and Zabbix |
| SMS | History, balance, and send |
| VPN | Account listing and config download |
| Operators | List, create, update, suspend, and fund operators |
| Recharge Cards | List recharge cards |
| Dashboard | Dashboard and NOC dashboard endpoints |
| Logs | Router, hotspot, PPP auth, and auto-suspension logs |
API v2 (OAuth-style)
Token-based authentication with request rate limiting. All v1 capabilities plus:
- Full CRUD on customers, bills, and payments
- Package listing
- Webhook management — create, update, and delete webhook endpoints
- Enhanced monitoring — Zabbix hosts/problems, device status, status checks
- SMS broadcast — send bulk SMS via API
API client management
- Create and manage API client credentials
- Track API request logs per client
- Rate limiting protects your instance from excessive API requests
Webhooks
Subscribe to real-time events and receive push notifications at your endpoint:
- HMAC-SHA256 signed payloads — verify that webhook requests originate from ISPBills
- Event filtering — subscribe only to the events you need
- Standardised envelope — every webhook includes the event name, timestamp, and data payload
- Async dispatch — webhooks are delivered via background jobs for reliability
See API Management.
Security
ISPBills includes multiple layers of security and access control to protect your operation.
Authentication
| Feature | Description |
|---|---|
| Two-factor authentication | TOTP-based 2FA for all operator accounts |
| WebAuthn / FIDO2 | Passwordless authentication support |
| Social login | OAuth login via Google, Facebook, and other providers |
| Secure login | Enhanced login with additional verification steps |
| Failed login tracking | Monitor and display failed login attempts |
| Separate auth flows | Dedicated authentication for customers, operators, and card distributors |
Access control
- Role-based permissions — each role (group admin, operator, sub-operator, manager) has a defined permission set
- Special permissions — grant individual operators granular permissions beyond their role defaults
- Access control middleware — enforced on every request
- Menu visibility — hide or show menu items per operator based on their role and permissions
- Balance enforcement — debit operators are automatically blocked when their balance reaches zero
- Credit limit enforcement — operations are blocked when an operator exceeds their credit limit
Audit logging
| Log Type | Description |
|---|---|
| Operator action logs | Every action performed by staff is recorded |
| Authentication logs | All operator and admin login events |
| Router logs | MikroTik command and event logs |
| PPP auth logs | PPP authentication success and failure records |
| Hotspot logs | Hotspot authentication events |
| Suspension logs | Service suspension and reactivation history |
| Customer change logs | Audit trail of all changes to customer records |
| Device access logs | Audit log for all device access attempts (MikroTik, Ubiquiti, Cambium) |
| Customer disconnect logs | All PPP/hotspot disconnection events |
| Activity logs | PostgreSQL-level activity logging with automatic daily purge |
All logs support CSV export for external analysis and compliance.
See: Two-Factor Authentication, Logs
Mobile App

The Android mobile app supports field and remote operations:
- View and search customers across operators
- Check account status, connection history, and online/offline status
- Renew subscriptions and change packages
- Record cash payments in the field
- Create and manage complaints
- Monitor router status and network health
- Receive push notifications for important events (payments, suspensions, new registrations)
See Mobile App.