Carrier-Grade Security Architecture
How RadiusOne protects subscriber credentials, network gateways, and automated M-Pesa transactions.
WireGuard ChaCha20-Poly1305 Tunnels
MikroTik routers communicate with our AAA cluster exclusively over encrypted WireGuard tunnels. Your router management interfaces never need to be exposed to public WAN IP addresses.
Multi-Tenant Row Isolation
Tenant data is completely segregated at the PostgreSQL schema level. Subscriber PPPoE passwords, phone numbers, and payment records are encrypted and isolated.
Continuous Off-Site Backups
Encrypted AES-256 database snapshots are replicated hourly to geographically distributed Cloudflare R2 object storage with 99.999999999% durability.
Kenya Data Protection Compliance
Full compliance with the Kenya Data Protection Act (2019). We maintain strict access logging and never sell or monetize operator network telemetry.
Ready to secure your ISP infrastructure?
Start your 14-day free trial with instant FreeRADIUS CoA activation.
Start Free Trial