ISP management software

One platform for authentication, billing and network control.

Culmen runs the systems an internet service provider depends on — RADIUS authentication, billing, fair-use enforcement, uplink failover and content filtering — as one platform sharing a single subscriber record. Deployed on your hardware or ours.

Browse the platformBook a walkthrough
QUOTA & FUP ENGINE ACTIVE
daily reset local timezone
on breach throttle applied
on reset throttle released
unlimited plans excluded, not overwritten
behaviour

Quota tracking and throttle release run on local time, not server UTC. Unlimited plans are excluded from the checker rather than silently reset by it.

Included in Culmen Core
FAILOVER ENGINE ACTIVE
uplink checks independent, per carrier
switch time under 4 seconds
on switch connection tracking flushed
flap protection hysteresis applied
behaviour

Each uplink is probed along its own path. When one fails, established sessions move with the route instead of holding the dead path until they time out.

Included in Culmen Professional
STAFF PANEL ACTIVE
reset quota usage, throttle, reconnect
reset MAC one action
disconnect CoA, no router login
export .xlsx, opens clean
behaviour

Each action completes every step it implies. Resetting a quota clears usage, removes the throttle and forces the reconnect, so the customer is genuinely restored.

Included in Culmen Core
$0
Per-subscriber fees
6
Modules, one subscriber record
< 4s
Uplink failover time
Both
On-premise or cloud

Design

Designed around the cases that are easy to get wrong.

Quota resets, route changes, session cleanup and filter bypass all fail in ways that look correct in the configuration. Culmen handles each one explicitly.

01

One subscriber record

A plan change in billing reaches the authentication server immediately. No nightly sync job, no drift between the system that charges a customer and the system that decides their bandwidth.

02

Perpetual licences

One payment, no per-subscriber metering. Costs stay flat as the subscriber count grows, and on-premise deployment keeps subscriber data inside your own network.

03

Correct by default

Timezone-aware quota resets, scoped connection-tracking flushes on route changes, stale-session cleanup and encrypted-DNS blocking are all enabled from the first day, not added after a problem appears.

04

Documented behaviour

Every module states its assumptions — interface names, profile names, what happens on failure. Nothing important is hidden behind a checkbox whose behaviour you have to guess at.

The platform

Six systems most operators run separately. Culmen runs them as one.

Every module reads and writes the same subscriber record, so billing, authentication and provisioning never disagree about what a customer is entitled to.

Access

Subscriber authentication

RADIUS and AAA with per-plan policy, session limits and bandwidth profiles applied at connect time.

Revenue

Billing & invoicing

Recurring plans, usage charges, prepaid balances, tax handling and automated dunning.

Fair use

Quota & FUP engine

Daily quota tracking on local time, automatic throttling on breach and automatic release on reset.

Uptime

Automatic failover

Independent per-uplink health checks with sub-four-second switching between transit providers.

Operations

Staff panel

Reset quota, release throttle, reset MAC, disconnect a session — without giving staff router access.

Control

Content filtering

Four independent filtering layers with per-tier policy, including encrypted-DNS endpoints.

Licences

Software & licences

Perpetual licences for deployment on your own hardware. No per-subscriber fees.

Culmen Content Filtering — five layers, DoH and QUIC closed, per-tier scope
Software Module

Culmen Content Filtering

Layered content filtering for subscriber networks, with per-plan policy rather than one blunt rule for everyone.

$439 once · or $35/mo View →
Culmen Staff Panel — no router logins, quota and MAC reset, Excel export
Software Module

Culmen Staff Panel

A web panel your support staff can actually use, without giving them router access. Add, block and unblock subscribers...

$489 once · or $39/mo View →
Culmen Failover Engine — asymmetric hysteresis, quota-aware balancing, standby hand-off
Software Module

Culmen Failover Engine

Automatic multi-carrier failover for MikroTik routers. Keeps subscribers online when an upstream provider fails.

$599 once · or $49/mo View →
Culmen RADIUS and Quota Engine — PPPoE and hotspot auth, daily quota with FUP, live CoA disconnect
Software Module

Culmen RADIUS & Quota Engine

Standalone authentication and fair-use enforcement for MikroTik networks. Deploy alongside your existing billing system.

$669 once · or $55/mo View →
Culmen ISP Suite Starter Licence — up to 500 subscribers, 6 modules, on-premise or hosted
Software Licence

Culmen ISP Suite — Starter Licence

A complete ISP management platform for operators up to 500 subscribers, deployed on your own server.

$1,349 once · or $109/mo View →
Culmen ISP Suite Professional Licence — up to 2,000 subscribers, 6 modules plus failover
Software Licence

Culmen ISP Suite — Professional Licence

The full platform for operators up to 2,000 subscribers, with multi-uplink failover and content filtering included.

$2,569 once · or $199/mo View →
View all licences

Deployment

Your hardware, or ours.

Most platforms are cloud-only. Plenty of operators cannot use them — for data-residency rules, for latency, or because the upstream link is the thing being monitored. Both models are supported properly.

Self-hosted

On-premise, perpetual licence

Runs entirely inside your infrastructure. One payment, no per-subscriber fees.

  • Subscriber data never leaves your network
  • Meets local data-residency rules
  • Keeps authenticating when upstream drops
  • You own the licence outright

Managed

Culmen Cloud

Hosted and maintained for you. You log in and operate your network.

  • Deployed same day
  • Updates and patching handled
  • Redundant, backed up hourly
  • Scales with subscriber count

Engineering

Remote services

Network design, RADIUS deployment, MikroTik configuration and audits — delivered as tested configuration files and written documentation.

Remote MikroTik Configuration — per router, remote session, working config delivered
Remote Service

Remote MikroTik Configuration

Your router configured properly by an engineer who runs one in production. Delivered as a tested import file.

$439 View →
Installation, Migration and Onboarding — parallel migration in a planned window, live deployment
Remote Service

Installation, Migration & Onboarding

Full deployment of the Culmen platform onto your server, including migration from whatever you're running now.

$529 View →
Remote Network Audit — whole network reviewed remotely, written report delivered
Remote Service

Remote Network Audit

An independent review of your network by someone who runs one, delivered as a written report you can act on.

$1,209 View →
View all services

Book a technical walkthrough.

Thirty minutes on your topology, your plan structure and how Culmen would fit. Technical, not a sales call.

Book a walkthroughBrowse the catalogue