Nothing travels in the clear.
Calls are set up only over TLS and the voice itself is encrypted to every phone and browser (SRTP and DTLS-SRTP). Plain SIP from the internet is refused outright.
Introducing vKOM-SECURE by VOIMAR
Military-grade secure communications for the AI era
Secure business voice, built in South Africa
vKOM Secure is VOIMAR's own secure, multi-tenant business voice platform. It brings the cloud PBX, call control, prepaid, a security shield and secure missions together in one management pane, hosted in South Africa or inside your own network.
Built for organisations where privacy and control matter: government, defence and security services, finance, and resellers across Africa.
Key features
Nine reasons organisations choose vKOM Secure
Every one of these is built into the platform today.
Sovereign by design.
vKOM Secure runs only on VOIMAR or customer hardware in South Africa, with no foreign cloud anywhere in the call path.
Emergency calls always get through.
10111, 10177 and 112 connect from every phone, past every limit, budget, credit and restriction, even if the central database goes down. The security desk is alerted the moment one is dialled.
An attack shield that bites back.
Flood, scanner and password-guessing attacks are detected and banned in the firewall within 30 seconds, and the inner layout of the network stays hidden.
Every rand under command.
Budgets per person, department, job level or any unit you define, plus spend caps and live-call limits, bar calls the moment a limit is reached. Premium and international numbers stay blocked until you allow them.
Any phone, your PIN, your bill.
PIN dialling lets a user call from any extension and bills it to them with their own restrictions. Prepaid wallets and vouchers stop calls exactly when credit runs out.
Command the whole organisation from one screen.
VOIMAR, resellers and customer administrators each see only their own scope, and every switch of scope is audited. Every call record and report follows the customer's own structure, and resellers can run it under their own brand.
No licence caps.
You pay for the extension seats, numbers and add-ons you use, never for concurrent calls or channels. No licence keys, and no channel caps to buy your way past.
Built to keep running.
Any region can carry any customer with automatic fail-over, and phones stay signed in from a protected credential cache if the central database cannot be reached.
Why it matters now
In the AI era, every call record is someone's training data
vKOM Secure keeps yours on South African hardware you control, with no offshore cloud, no third-party AI and no data harvesting anywhere in the call path.
Your calls do not train anyone's AI
No third-party AI and no data harvesting sit anywhere in the call path.
Nothing goes offshore
VOIMAR or customer hardware in South Africa. No foreign cloud.
Nobody reads over your shoulder
Encrypted on every public link, and recording only where you have ordered it.
One management pane
One management pane
Super administrators, resellers and customer administrators run everything from one screen. Each sees only their own scope, and every switch of scope is audited.
VOIMAR super administrators
The whole platform, with every action in the audit log.
Resellers
Their own customers, under their own brand, name, logo, colour and domain.
Customer administrators
Their own organisation: extensions, numbers, budgets, credit and reports.
Every switch of scope is audited
Scale
One multi-tenant instance, designed for 20,000 SIP registrations
vKOM Secure is designed for up to 20,000 SIP registrations and 3,000 concurrent calls per multi-tenant instance.
20,000
SIP registrations per multi-tenant instance
3,000
concurrent calls per instance, 15% of registrations at the busy hour
Design targets from the architecture and the software limits, not measured results, for one multi-tenant instance with G.711 calls and no transcoding. One tenant or many makes no difference to the limits.
No licence caps
No licence caps. Capacity follows your hardware.
You pay for what you use: extension seats, numbers and add-ons such as call recording. Never for concurrent calls or channels. There are no licence keys and no channel caps to buy your way past.
Many phone platforms tie concurrent calls to licences and charge to raise them. vKOM Secure does not.
How capacity works
Registrations
Held in the Switch's memory, so a modern server holds tens of thousands.
Calls
Carried by regional PBX nodes. Add CPU cores or another node, and the platform is designed to carry more calls.
Voice
Relayed by a dedicated media engine that is designed to grow with CPU cores and network capacity.
Records and billing
Kept in one central database.
Reference sizing
Reference sizing: 20,000 SIP registrations per multi-tenant instance with 15% in concurrent calls (3,000 simultaneous calls). More hardware, or more nodes per region, takes it higher.
Limits are protection, never a licence
Per-customer limits are protection set by VOIMAR with the customer (caps on live calls, calls per minute and spend, to stop toll fraud), raised as a customer grows. They are never a licence.
On your own hardware
Customer-hosted, on your own hardware, you scale by adding servers, with no licence renewal to change capacity.
No licence caps does not mean unlimited. Capacity is bounded by your hardware and by each instance's sizing, per-customer fraud-protection caps apply, and some audio codecs are licensed separately by their owners.
Every deployment is sized to the customer's needs and call-quality targets.
Reference sizing is a design target.
Military-grade
What military-grade means in vKOM Secure
Military-grade means all of this, in one platform.
- 01Encryption on every public link
- 02Sovereign hosting on VOIMAR or your own hardware
- 03Emergency calls that route through any limit and through a database outage
- 04A credential cache that keeps phones working when the database is down
- 05An attack shield that bans in under 30 seconds
- 06Sealed break-glass administrator access that raises an alert on every use
- 07API keys bound to one customer and one approved server, over pinned TLS
Built for defence and government security requirements. We make no certification or accreditation claim.
The platform
Ten modules, one management pane
Cloud PBX core
One platform for many organisations, with the phone system features each of them expects.
Call control and cost management
Know what every call costs, and stop spend before it passes a limit.
Prepaid and vouchers
Sell voice on credit that cannot overrun.
Organisation reporting
Reports that follow the customer's own structure, not ours.
Emergency and compliance
Emergency calls always get through, and the right people are told.
Secure missions governance
Policy for secure team messaging, set by the administrators, working with VOIMAR Konnector.
Softphones and devices
The right app for each person, and standard desk phones too.
One management pane
Each level sees its own scope, and every change of scope is recorded.
White label
Resellers sell it as their own.
Integrations
Connect vKOM Secure to the systems around it.
Modules
What vKOM Secure does
MODULE 01
Cloud PBX core
One platform for many organisations, with the phone system features each of them expects.
- Multi-tenant: many organisations on one platform, each kept apart, designed for up to 20,000 SIP registrations and 3,000 concurrent calls per instance
- Extensions on several devices
- Numbers (DIDs) routed to an extension, ring group, conference or voicemail
- Voicemail and conferences
- Class of service per extension
- Regions: one customer is one phone system across several regions (for example Johannesburg, Cape Town and Durban), with free calls between regions and automatic fail-over if a region goes down
MODULE 02
Call control and cost management
Know what every call costs, and stop spend before it passes a limit.
- Per-second rating with rate plans
- Cost centres, and call budgets per user, department, job level or any structure the customer defines (Business Unit, Division, Office, Province, Town and more), with calls barred when a budget is used up
- Monthly spend caps; premium and international calls blocked unless enabled
- PIN dialling: call from any phone and bill the PIN owner, with the owner's restrictions applied
MODULE 03
Prepaid and vouchers
Sell voice on credit that cannot overrun.
- A dedicated voice RADIUS service with company or per-user wallets
- Voucher batches, priced and sold through VOIMAR Shop Keeper
- Calls stop when credit runs out
MODULE 04
Organisation reporting
Reports that follow the customer's own structure, not ours.
- The customer's own structure on every call record
- Reports grouped by any level, plus analytics
- A call records (CDR) API for integrations
MODULE 05
Emergency and compliance
Emergency calls always get through, and the right people are told.
- Emergency numbers (10111, 10177 and 112) always connect, from every phone, whatever the limits or credit, and are never cut off
- Each emergency call is logged, and the customer's security desk is told at once
- A caller number is always presented, as South African carrier rules require
- Call recording happens only where the customer has ordered it
MODULE 06
Secure missions governance
Policy for secure team messaging, set by the administrators, working with VOIMAR Konnector.
- Mission policy: expiry, retention, knowledge base and audit, and a performance view set in vKOM Secure
Enforcement of the policy inside VOIMAR Konnector is planned.
MODULE 07
Softphones and devices
The right app for each person, and standard desk phones too.
- Voimar Dialer: free with every extension, in the browser (WebRTC), for the back office
- VOIMAR Konnector (priced separately, per person): for executives and field teams, with end-to-end encrypted SecureChat
- Standard desk phones work over encrypted SIP
MODULE 08
One management pane
Each level sees its own scope, and every change of scope is recorded.
- VOIMAR super administrators, resellers and customer administrators each see their own scope
- Every scope switch is audited
MODULE 09
White label
Resellers sell it as their own.
- Your own brand name, logo, colour and domain
- A "powered by VOIMAR" footer
MODULE 10
Integrations
Connect vKOM Secure to the systems around it.
- A REST API for customers, extensions and call records
- A REST API ready for VOIMAR GYTE (tickets and the record store)
- The voice carrier, through VOIMAR's session border controller
Planned: the GYTE connection, Microsoft Teams Direct Routing, VOIMAR SMS and APN, and CRM connectors.
Security
Nothing in the clear, and nobody out of scope
vKOM Secure is built for organisations that expect to be probed.
Nothing in the clear from the internet
- Signalling only over TLS (SIP-TLS and secure WebSocket)
- Voice encrypted to phones and browsers (SRTP and DTLS-SRTP)
- Default-deny firewalls on every server
- Network topology hidden from the outside
Toll-fraud and attack shield
- Flood detection, scanner blocking and automatic bans pushed into the firewall
- Brute-force lock-outs
- Per-customer limits on simultaneous calls and calls per minute
- Phones cannot fake their identity
Administrator security
- Two-step sign-in and a complete audit log
- One sealed emergency administrator account, which raises alerts when it is used
API security
- Keys tied to one customer and to approved server addresses
- Encrypted, certificate-pinned connections
- Abuse detection
Resilience
- Emergency calling keeps working through an outage of the central database
- Phones stay signed in from a protected credential cache when the database cannot be reached
Sovereignty
- No foreign cloud: everything runs on VOIMAR or customer hardware in South Africa
Compare
How vKOM Secure compares, by kind of product
| Capability | vKOM Secure | Typical hosted PBX | Consumer messengers | Cloud contact centres |
|---|---|---|---|---|
| Hosted in South Africa, no foreign cloud | Yes | Varies by product | No | Varies by product |
| Can run on your own hardware | Yes | Varies by product | No | No |
| Encrypted signalling and voice on every public link | Yes | Varies by product | Yes | Varies by product |
| Call budgets that bar calls per person or unit | Yes | Varies by product | No | Varies by product |
| Prepaid wallets and vouchers | Yes | Varies by product | No | No |
| Emergency numbers connect past every limit | Yes | Varies by product | No | Varies by product |
| One pane for administrators, resellers and customers | Yes | Varies by product | No | Varies by product |
| White label for resellers | Yes | Varies by product | No | Varies by product |
Yes YesVaries by product Varies by productNo Generally notA general comparison by kind of product, from public information. Individual products differ.
Platform tour
From first sign-in to your first report
Seven steps through the management pane. Want to see it live? Talk to sales and we will walk you through it.
- 01
Sign in
Administrators sign in with a password and a two-step code.
- 02
See your scope
A VOIMAR super administrator, a reseller or a customer administrator sees only their own scope. Every switch of scope is audited.
- 03
Set up the organisation
Describe your structure (Business Unit, Division, Office, Province, Town) once. It then appears on every call record and report.
- 04
Add people and devices
Create extensions on the Voimar Dialer browser softphone (free with every extension), on VOIMAR Konnector (priced separately, per person) or on standard desk phones, and route numbers to an extension, ring group, conference or voicemail.
- 05
Set the limits
Give each person, department or job level a call budget and a monthly cap. Calls are barred when the budget is used up. Emergency numbers are never blocked.
- 06
Add credit
Load company or per-user prepaid wallets, or issue voucher batches sold through VOIMAR Shop Keeper.
- 07
Watch it
Read reports grouped by any level of your structure, and pull call records through the API. The security shield acts on floods and scans on its own.
Hosting
Hosted by VOIMAR, or installed in your own network
Both options use the same platform and the same management pane.
VOIMAR-hosted
VOIMAR runs vKOM Secure for you in South Africa. You use it, we operate it.
Customer-hosted
VOIMAR installs it inside your own data centre or private network, with VOIMAR support.
Planned
Planned capabilities
vKOM Secure is being extended with the capabilities below. They are planned, they are not part of the platform today, and we do not promise dates.
Voimar ID single sign-on with multi-factor sign-in for administrators
Encryption of every link between vKOM Secure's own servers, using a WireGuard mesh with an extra preshared-key layer, a hedge against future quantum attacks
Running with no internet connection (air-gapped), from a local package mirror and VOIMAR's release bundle
Policy enforcement for secure missions inside VOIMAR Konnector
Regional emergency caller ID
Priority calling with pre-emption (precedence levels)
Only approved, certificate-enrolled devices may connect
Hotline (lift-and-ring) and command conferences that pull a team in with one press
Alerts with "press 1 to acknowledge"
IVR, queues, paging, call parking, busy lamps, hot-desking and a contact-centre package with wallboards
Phone auto-provisioning and fax
Video meetings
A geo-redundant database
Radio and satellite gateways
The GYTE connection, Microsoft Teams Direct Routing, VOIMAR SMS and APN, and CRM connectors
Ready to put your communications under your own command?
Tell us about your organisation and we will be in touch. Powered by VOIMAR.