All work

Konnekted

Live

Subscriber billing for Kenyan WISPs

Multi-tenant subscriber billing and network management platform for Kenyan wireless ISPs. M-Pesa collection, MikroTik integration, RADIUS authentication, and hotspot voucher operations. Built and maintained by VE.KE for Konnekted.

Visit konnekted.co.ke

The story

Konnekted is our subscriber billing and network management platform for Kenyan Wireless ISPs. Built because we kept seeing the same gap: small WISPs were running their billing on spreadsheets and their network on MikroTik configs that drifted from the billing state within days.

Konnekted ties the two together. One shared FreeRADIUS cluster authenticates subscribers across every tenant with database-per-tenant isolation. One reconciliation job runs every five minutes to make sure MikroTik enforcement (PPPoE secrets, queue trees, firewall rules) matches the billing system's view of who's paid up. M-Pesa STK and Paybill handle subscription collection; hotspot voucher pipelines run thousands of one-shilling sales per ISP per day; 47 customer-facing API endpoints power the self-service portal.

What we built

Concrete features that are in production today. No roadmap items.

Multi-tenant isolation

Database-per-tenant on a shared FreeRADIUS cluster. Tenants identified by realm (username@realm); no data crosses.

MikroTik enforcement

PPPoE secret provisioning, queue tree configuration, firewall rules. Pushed via RouterOS API, read back to verify.

5-min reconciliation

Background job every 5 minutes compares network state vs billing state and corrects drift. No silent divergence.

M-Pesa STK + Paybill

Daraja STK and Paybill collection with idempotent callbacks. Stripe and Paystack also wired in.

Hotspot vouchers

Stateless time-limited voucher pipeline. Some ISPs sell thousands of one-shilling codes per day through this.

Self-service portal

47-endpoint customer API for usage, top-ups, plan changes, alongside admin MRR and expiry-forecasting dashboards.

What stands out

Database-per-tenant isolation on a shared FreeRADIUS cluster
MikroTik PPPoE + queue + firewall enforcement reconciled every 5 minutes
47-endpoint customer self-service API alongside admin MRR and expiry dashboards

Want something like this?

Tell us what you need. Fixed price in KES within 2 working days.