Features
Everything in the box.
No add-ons, no tiers.
Every PaalFi account gets the full platform — from the WireGuard tunnel your routers dial through, to the captive portal your customers see, to the API your own tools call.
Connect & control
Your routers, reachable anywhere.
WireGuard tunnels
Routers dial out over an encrypted tunnel and get a static VPN IP. Works behind Starlink, CGNAT and mobile data — no public IP or port-forwarding.
Paste-one-script onboarding
Copy a single provisioning script into your MikroTik terminal. It configures the tunnel, registers the router and comes online in your dashboard on its own.
Full RouterOS sync
Hotspot users, speed profiles, queues and firewall pieces managed from the dashboard and synced to RouterOS v7 over the tunnel.
RADIUS built in
Central authentication with per-user speed caps, session timeouts and live accounting — flip it on per router when you outgrow local hotspot users.
Live sessions
See who is online on every router right now, with data used, uptime and one-click disconnect.
Platform usage insight
DPI-free traffic classification shows which apps — WhatsApp, YouTube, TikTok — fill your pipes, per session.
Sell & get paid
From voucher to Mobile Money.
Time, data & unlimited plans
Price by minutes, hours, days, weeks, months or years — or by data cap. Attach a speed profile to each plan.
Bulk QR vouchers
Generate hundreds of codes at once, print-ready sheets and CSV export for resellers.
Branded captive portal
Your logo, colours and login methods on the page customers land on — voucher, phone, free trial or buy-online.
Paystack, Hubtel & cash
Customers pay by Mobile Money or card and get online automatically. Use your own gateway keys so money settles straight to you, or collect through the platform.
Rewards & campaigns
Loyalty points on every purchase, first-time free WiFi, VIP device whitelists and event access codes.
Notifications
Email and SMS receipts, expiry warnings and offline-router alerts.
Protect
Keep the network honest.
Anti-tethering
Detects customers sharing one login across many devices, scores the evidence and enforces your policy on the router automatically.
Content filtering
DNS-level blocking per router for the categories you choose.
Roles & 2FA
Owner and staff roles with granular permissions, two-factor login and trusted devices.
Audit trail
Every change — who, what, when — recorded and searchable.
Schools
Student WiFi without the admin pain.
Roster upload
Upload a spreadsheet of index numbers; every student gets a reusable WiFi login with a generated password.
Per-student control
See who is online, data and time used; disable, renew or reissue passwords one by one or in bulk at term start.
Class-hours windows
Block student logins during teaching hours — internet reopens on your schedule.
Build on it
For your own tools.
REST API
Key-authenticated API over your routers, packages, vouchers and sessions.
Signed webhooks
Get pushed events — payments, sessions, router status — with HMAC signatures your servers can verify.
All of it, on every account.
There are no feature tiers to compare — just simple usage-based pricing.