Simplify WiFi Access & Management
Smarter, Faster, More Connected with Kiwire 4.0
Deliver secure, scalable WiFi access while gaining real-time insights into user behavior and network performance.
Everything You Need, Built In
A unified portal for every aspect of hotspot management — from user onboarding to network security and engagement analytics.
Device Management
Centralized management of network controllers — add, configure, and monitor access point controllers across 40+ vendor integrations from a single dashboard.
40+ vendor integrations
Multi-zone controller mapping
Real-time status + alerts
Dashboard & Analytics
At-a-glance platform overview with real-time charts for active sessions, user registrations, login activity, and bandwidth utilization per zone.
Live sessions & registrations
Bandwidth per zone
Activity feed + trends
Account Management
User Account CRUD
Create, list, edit, deactivate WiFi user accounts
Access Profiles
Bandwidth limits, time quotas, concurrent session controls
Voucher System
Generate, print, and manage prepaid access vouchers
Topup Codes
Recharge codes for prepaid WiFi balance top-up
Diagnostic Account
Test account for troubleshooting portal login flows
WiFi Certificates
Per-user certificate management for WPA2-Enterprise
Profile Reset
Reset user credentials and clear session data
Subtenant User Management
Delegate user administration to sub-organizations
Captive Portal
Drag-and-Drop Portal Designer
Visual editor for fully branded guest portal pages
Journey Builder
Multi-step user login flow designer with branching logic
Zone Mapping
Assign portal journeys to specific network zones/SSIDs
Message Templates
Email and SMS notification templates with starter layouts
Media Library
Upload and manage images and media assets for portals
Portal Configuration
MAC security, autologin, password policy, firewall rules
Multi-Language Portal
Guest portal in 8 languages: EN, MS, ID, ES, ZH, AR, DE, FR
Profile Policy Enforcement
Apply bandwidth and time restrictions per user profile
Zone Restriction Controls
Restrict login attempts by zone, MAC address, or profile
Autologin Configuration
MAC, cookie, QR, automatic re-login for returning users
WiFi Enterprise (WPA2-Enterprise / 802.1X)
Enterprise Portal Designer
Branded 802.1X onboarding portal with template library
Enterprise Journey Builder
Multi-step onboarding flows for enterprise WiFi enrollment
RADIUS Cert Management
Generate and manage RADIUS server certificates
Enterprise Portal Config
Configure SSID, RADIUS settings, and enterprise parameters
AD / LDAP Enterprise Login
Directory-integrated authentication for 802.1X
Google Workspace Login
Google OAuth for enterprise WiFi login
Registered Account Login
Username/password for pre-provisioned enterprise accounts
Enterprise Media Library
Media assets scoped to enterprise portal templates
Login Methods (15+ Types)
One-Click Login
Instant guest access — no credentials required
Public Sign Up
Self-registration form with email/SMS confirmation
Sponsored Sign Up
Host-approved guest access with sponsor verification
QR Code Login
Scan-to-connect via generated QR codes at venues
SMS OTP
Mobile phone verification via one-time passcode
Email OTP
Email-based one-time passcode authentication
Social Network Login
OAuth2 login via Google, Facebook, and social platforms
Microsoft Entra ID
Azure AD / Microsoft 365 SSO for corporate networks
Voucher Login
Pre-printed voucher code redemption at login
Active Directory Login
Windows AD domain credential pass-through authentication
LDAP Login
Directory-bound authentication for enterprise users
WhatsApp OTP
WhatsApp-delivered one-time passcode via Synchrochat
PMS Integration Login
Hotel room number / PMS record based authentication
External Database Login
Authenticate against custom external user databases
API / Token Login
Headless API-driven authentication for kiosks and apps
Engagement, Marketing & Subtenant Management
Campaign Management
Create targeted WiFi campaigns with rich media and scheduling
Ads Management
Banner and interstitial ad placements on captive portal
Survey Management
Embed surveys in portal flows and collect guest feedback
Campaign Targeting
Target by zone, profile, login method, or user segment
Notification Connectors
Send campaign notifications via SMS, Email, or WhatsApp
Sponsored Sign Up
Capture leads with host-sponsored guest registration
Subtenant List
Create and manage sub-organizations under a parent tenant
Subtenant Administrators
Dedicated admin accounts scoped to a subtenant
Subtenant Roles
Fine-grained RBAC roles for subtenant admins
Subtenant Users
User accounts segmented per subtenant
Controller Assignment
Assign specific network controllers to each subtenant
Notification Thresholds
Email alerts when subtenant usage crosses defined limits
Monitoring & Observability
Audit Trail
Tamper-evident log of all admin actions with checksum verification
Captive Portal Logs
Real-time captive portal event log viewer
Portal Session Debugger
Inspect live and historical portal sessions for troubleshooting
View Activity Logging
Records which admin viewed which module — full traceability
Monthly Audit Partitioning
Audit records partitioned by month for performance at scale
Security Event Alerts
Email alerts on repeated failures, MFA disable, superuser login
System Administration & Settings
Organisation Profile
Branding, business details, GST/VAT rate, industry type
General Settings
Date/timezone, password reset behaviour, tax rate
Voucher Settings
Voucher prefix, expiry, print format configuration
Topup Settings
Topup code rules, denomination, and expiry policies
Role-Based Access Control
Granular permission sets per admin role
Multi-Tenant Management
Manage all tenant organisations from a single superuser panel
Controller Login Config
Global login checks: concurrency, MAC, zone, credit, quota
Admin API Keys
Rate-limited, hashed API keys with IP allowlist per admin
Designed for Security. Engineered for Compatibility.
Kiwire 4.0 delivers enterprise-grade security while seamlessly integrating with your existing infrastructure. Designed to protect, scale, and simplify network management, it empowers businesses to deploy secure connectivity without disrupting current systems or workflows.
Built for Enterprise Security
Kiwire4 enforces security controls aligned with ISO 27001 and industry best practices across every layer of the platform.
Multi-Factor Authentication (TOTP)
RFC 6238 TOTP-based MFA enforced for all admin accounts. First-time setup is mandatory; QR code provisioning for Google Authenticator and compatible apps.
Idle Session Timeout
Sessions automatically terminated after 30 minutes of inactivity. Both server-side enforcement and client-side JS heartbeat protection.
Password Expiry Policy
Admin passwords expire every 90 days. Users are force-redirected to change their password before accessing any system resources.
Role-Based Access Control (RBAC)
Granular permission system per admin role. Pre-built Manager and Viewer roles. Full permission matrix customizable per tenant.
Tamper-Evident Audit Trail
Every admin action recorded with user ID, IP address, user-agent, URL, and timestamp. Checksum-protected records prevent undetected tampering.
HTTPS / HSTS Enforcement
Strict-Transport-Security header with 1-year max-age, includeSubDomains, and preload flag enforced on all responses.
Content Security Policy (CSP)
Full CSP headers on every page response: default-src self, object-src none, frame-src restricted to Google reCAPTCHA only.
CSRF Protection
Laravel CSRF token middleware on all state-mutating routes. SPA AJAX calls verified via X-CSRF-Token headers automatically.
Multi-Tenant Database Isolation
Each tenant runs on a completely separate database. No cross-tenant data leakage possible by design — connection is resolved per request.
Bcrypt Password Hashing
All admin passwords stored using Laravel's bcrypt hashing (cost factor 12+). No plaintext passwords stored in the system database.
Security Alert Notifications
Automated email alerts for: repeated failed logins, MFA disabled, superuser session started, and admin account deactivated.
Admin Session Binding
Single active session enforcement per admin account. New login invalidates any concurrent session on another device or browser.
Hashed API Keys
Admin REST API keys are SHA-256 hashed before storage. Rate limiting and IP allowlisting enforced per API key.
Server Header Suppression
X-Powered-By and Server headers removed from all responses to prevent technology fingerprinting by attackers.
Hardware Support
40+ Network Controller Vendors
Kiwire4 supports virtually every enterprise WiFi controller and access point vendor on the market.
.png)
What's Changed
Feature evolution from the previous generation — what carried over, what's new, and what's still on the roadmap.
Feature / Functionality | Kiwire Version 3 | Kiwire Version 4 |
|---|---|---|
👥 Subtenants | ||
Subtenant List | ✔ | ✔ |
Administrator Management | ✔ | ✔ |
Role Management | ✔ | ✔ |
Subtenant Users | ✔ | ✔ |
Controller Assignment | ✔ | ✔ |
⚙️ System & Configuration | ||
Organisation Profile | ✔ | ✔ |
Settings — General | ✔ | ✔ |
Settings — Voucher | ✔ | ✔ |
Settings — Topup | ✔ | ✔ |
Settings — Campaign | ✔ | Removed |
Settings — Date & Time Zone | ✔ | ✔ |
System Settings — General | ✔ | ✔ |
System Settings — Cron Timing | ✔ | ✔ |
System Settings — SMTP | ✔ | Removed |
System Settings — WhatsApp | ✔ | Removed |
System Settings — App Version | ✔ | Planned / Partial |
White Label | ✔ | Planned / Partial |
High Availability | ✔ | Planned / Partial |
Administrator Management | ✔ | ✔ |
Roles & Permissions | ✔ | ✔ |
License Management | ✔ | Planned / Partial |
Audit Trail | ✗ | New |
Portal Session Debugger | ✗ | New |
🔗 Integrations & Connectors | ||
Radius | ✔ | Removed |
Active Directory | ✔ | ✔ |
LDAP | ✔ | ✔ |
Social Networks Login | ✔ | Planned / Partial |
Microsoft Entra ID (Azure AD) | ✔ | ✔ |
SMTP (Email Connector) | ✔ | ✔ |
SMS Connector | ✔ | ✔ |
Marketing Email Connector | ✔ | ✔ |
Database Connector | ✔ | ✔ |
PMS (Property Management System) | ✔ | ✔ |
API Connector | ✔ | ✔ |
Web Hooks | ✔ | ✔ |
Payment Gateway | ✔ | Planned / Partial |
WhatsApp / Synchrochat | ✔ | ✔ |
Omaya Connector | ✔ | ✔ |
HSS Integration | ✔ | Planned / Partial |
📶 Devices & Network | ||
Device Controller Management | ✔ | ✔ |
Management Information Base (MIB) | ✔ | Planned / Partial |
Notification Rules | ✔ | Planned / Partial |
Device Status Monitoring | ✔ | Planned / Partial |
Monitoring Logs | ✔ | Planned / Partial |
Zone Mapping | ✔ | ✔ |
Project Mapping | ✔ | Planned / Partial |
Mobile App Integration | ✔ | Planned / Partial |
🌐 Captive Portal & Login Engine | ||
Journey Builder | ✔ | ✔ |
One Click Login | ✔ | ✔ |
Public Sign Up | ✔ | ✔ |
Sponsor Sign Up | ✔ | ✔ |
QR Login | ✔ | ✔ |
Portal Media Library | ✔ | ✔ |
Page / Portal Designer | ✔ | ✔ |
Message Templates | ✔ | ✔ |
Notification (Login Notifications) | ✔ | Planned / Partial |
Auto Login Checks | ✔ | Planned / Partial |
Login Checks | ✔ | Planned / Partial |
Post Login Actions | ✔ | Planned / Partial |
Additional Fields (per method) | ✔ | ✔ |
↳ Policy Configuration | ||
Main Configuration | ✔ | ✔ |
MAC Security | ✔ | ✔ |
Auto-Login Configuration | ✔ | ✔ |
Password Policy | ✔ | ✔ |
Firewall Rules | ✔ | ✔ |
Zone Restriction | ✔ | ✔ |
Dynamic Bandwidth | ✔ | Planned / Partial |
Account Policy | ✔ | Planned / Partial |
Device Policy | ✔ | Planned / Partial |
Profile Policy | ✔ | ✔ |
User Panel | ✔ | Planned / Partial |
Buy Profile Panel | ✔ | Planned / Partial |
Approve User Device | ✔ | Planned / Partial |
WiFi Enrollment | ✔ | Planned / Partial |
3rd Party Configuration | ✔ | ✔ |
👤 Accounts | ||
WiFi Certificate | ✔ | Planned / Partial |
Profile Management | ✔ | ✔ |
Persona | ✗ | ✗ |
Voucher Management | ✔ | ✔ |
User Management | ✔ | ✔ |
Bulk User Modification | ✔ | ✗ |
Reset Profile | ✔ | ✔ |
Topup Code | ✔ | ✔ |
HSS (Home Subscriber Server) | ✔ | ✗ |
Diagnostic Account | ✔ | ✔ |
WiFi Certificate (V4 module) | ✗ | New |
📣 Engagement & Campaigns | ||
Campaign Management | ✔ | Planned / Partial |
Ads Management | ✔ | Planned / Partial |
Surveys Management | ✔ | Planned / Partial |
Smart Banner | ✔ | Planned / Partial |
💰 Finance | ||
Invoice | ✔ | Planned / Partial |
Payment Report | ✔ | Planned / Partial |
PMS Payment Queue | ✔ | Planned / Partial |
PMS Manual Posting | ✔ | Planned / Partial |
Voucher Summary | ✔ | Planned / Partial |
Voucher Slip | ✔ | Planned / Partial |
📊 Reports & Analytics | ||
Accounts Reports (Summary, Expiry, Creator, Voucher) | ✔ | Planned / Partial |
Login Reports (Authentication, Sessions, Records, Summary) | ✔ | Planned / Partial |
Bandwidth Reports (Usage, History, Top Accounts) | ✔ | Planned / Partial |
Campaign Impression & Engagement Reports | ✔ | Planned / Partial |
Delivery Logs (SMS, Email, PMS Transactions) | ✔ | Planned / Partial |
Insight Reports (Device, Registration, Social Analytics) | ✔ | Planned / Partial |
Security Reports | ✔ | Planned / Partial |
Captive Portal Logs (Monitoring) | ✔ | Planned / Partial |
🛠️ Help & Tools | ||
Monitor — Service | ✔ | Planned / Partial |
Monitor — Scheduler | ✔ | Planned / Partial |
Online Knowledge Base | ✔ | Planned / Partial |
Software Update | ✔ | Planned / Partial |
Database Diagnostic & Maintenance | ✔ | Planned / Partial |
System Logs | ✔ | Planned / Partial |
License Usage | ✔ | Planned / Partial |
Ping Tool | ✔ | Planned / Partial |
Find MAC Address | ✔ | Planned / Partial |
System Quick Fix | ✔ | Planned / Partial |
Bypass User Device | ✔ | Planned / Partial |
Sources and Credits | ✔ | Planned / Partial |
Pricing
Seamlessly scale your WiFi experience while turning every connection into revenue.
From startups to enterprises—there’s a plan for you
Add-on Module
Starter
Simple WiFi access to start your journey.
$0
✔ Dashboard ✔ Basic Captive Portal Login Page ✔ Login Method (Social Login, Sign-up & One Click Login) ✔ Basic User Authentication ✔ Limited PDPA ✔ 1-venue ✔ Engagement & Marketing ✔ Limited Device/User Capacity ✔ Basic Reporting ✘ Integrations & Connectors ✘ Wi-Fi Hardware ✘ Technical Support
Standard
Turn WiFi into a marketing and data tool.
$90
✔ Drag-and-Drop Portal Designer ✔ Standard Captive Portal Login Page ✔ Variable Login Method (15+ types) ✔ Engagement & Marketing ✔ Network Monitoring ✔ Voucher & Campaign Management ✔ Email/SMS Marketing Integration ✔ 1-Hardware/Gateway ✔ Limited Device/User Capacity ✔ Advanced Reporting ✔ Technical Support
Max
Custom solutions for enterprise-scale deployment.
Custom
✔ Advanced Dashboard Customization ✔ Customizable Authentication Flow ✔ Customizable splash page ✔ Unlimited Insight & Analytics Reporting ✔ Customizable PMS Integration ✔ Multi-Site Management ✔ Security & Compliance Control ✔ Deployment Flexibility
Available Integrations
Active Directory
LDAP
Microsoft Entra ID
SMTP/Email
SMS Gateway
PMS (Property Management)
$3
$5
(pay as you go)
Marketing Email
External Database
REST API
Webhooks
Google OAuth
Standard WPA Security
WhatsApp Integration
SynchroChat Integration
Device Controller Management
PDPA Compliance
Additional Device Controller