SELF-HOSTED UNIFIED COMMUNICATIONS
Bulwark Voice Suite
Your entire phone system — calls, video, messaging and contact-centre control — running on your own server. Cisco Call Manager-class features, encrypted by default, and able to run completely offline. One signed installer, no cloud dependency.
On your own server
Runs fully offline
Encrypted by default
4-node active-active
System overview
neha · super admin
Registered endpoints
486
▲ 12 today
Active calls
37
8 video · 29 voice
Queue answer rate
94%
SLA met
Capacity used
41%
tier: Enterprise
Cluster · active-active
node-01 primary
node-02 online
node-03 online
node-04 online
Config replicated · media relay healthy
Live calls
1007 → 1042voice02:14
Sales queue → 1030acd00:48
Meeting · Boardroomvideo31:50
PSTN → IVR → 1011voice00:12
Admin console — system overview (illustrative)
One platform, every channel
Voice, video, WebRTC and messaging in a single server.
VoIP telephony
SIP hardphones and softphones register and call, with TLS signalling and SRTP media.
Video conferencing
SIP VC room systems and browsers join the same meetings; scales with a dedicated video bridge.
WebRTC browser clients
Voice and video in the browser — no plugin, encrypted end to end with DTLS-SRTP.
Presence & instant messaging
See who's available; chat 1:1 and in groups, with federation over XMPP.
Call Manager-class control
Hunt groups, ACD queues, IVR, voicemail, shared lines, park, pickup, transfer, forward, paging.
Perpetual (always-on) sessions
Persistent conferences, standing VC rooms and supervised 1:1 hotlines that auto-reconnect.
Clients your people already know how to use
Web, desktop and mobile softphones — plus browser video rooms.
AK
Anita Kulkarni
You
DTLS-SRTP
🎙📷⏸⇄✕
Web softphone — WebRTC, in browser
NE
Neha
Available
Search people…
AK
Anita K.RM
Ravi M.SP
Sneha P.HD
Help DeskDialer
1042
12abc3def
4ghi5jkl6mno
7pqrs8tuv9wxyz
✱0+#
📞 Call
Desktop softphone — presence + dialer
9:41📶 🔋
RM
Ravi Menon
Encrypted · 03:21
🎙mute⏸hold⇄transfer
▦keypad🔊speaker＋add
✕
Mobile softphone — iOS & Android
SP
Sneha P. speakingAK
AnitaRM
RaviVC
Boardroom SIPYou
🎙📷🖥💬✕
5 in room · SFU
Video meeting — browsers and SIP room systems together
Cisco Call Manager-class call control
Everything a modern PBX needs — generated and managed from one console.
Hunt groups
Simultaneous or sequential ring across teams.
ACD queues
Agents, tiers and skills with live SLA reporting.
IVR / auto-attendant
Menu trees built in the console, no scripting.
Voicemail + MWI
No-answer/busy deposit, lamps, voicemail-to-email.
Park & pickup
Valet park and group call pickup.
Transfer & forward
Attended/blind transfer, conditional forwarding.
Paging & intercom
One-to-many paging and intercom groups.
CDR & click-to-call
Full call records; originate calls from any app.
Secure by default — not as an add-on
Encryption and access control are on the moment you install.
Encrypted signalling & media
TLS SIP and SRTP for phones; mandatory DTLS-SRTP for WebRTC; strongest suite negotiated first.
HTTPS admin + RBAC
Signed cert auto-generated; roles granted per module; two super admins required at install.
2FA & recovery
TOTP authenticator (offline), mandatory security questions, and an offline break-glass recovery kit.
Encryption at rest
AES-256-GCM for secrets, encrypted backups and full-disk encryption guidance.
Tamper-evident audit
Append-only, hash-chained log of every change and login attempt, replicated across nodes.
Compliance-ready controls
Data retention, subject erasure and a PCI recording mask. Controls you run in your own programme — no certification implied.
High availability & scale
Up to four nodes, all active at once — reach any node, with no cold failover.
node-01
node-02
node-03
node-04
- Multi-master config replication with record-level conflict review
- Accepts edits while offline, reconciles on reconnect
- Capacity measured per node; never promises "unlimited"
- Shared SIP edge and media relay keep calls up during a node loss
Deployment & updates
One signed installer. A guided wizard. Updates applied on top.
- Single self-contained installer — every engine bundled, nothing downloaded
- Each capability runs as its own service, so a restart isolates one module
- Per-feature logging with a basic/verbose switch
- Runs fully offline; signed packages verified before install
- Update by running the update package on top — automatic rollback on failure
Connectivity
- SIP trunks to any ITSP
- PRI gateways
- FXO / FXS (ATA) gateways
- Cisco presets + generic profiles
- Secure or plain trunking per provider
Reporting & analytics
- Call, queue and agent reports
- SLA answer rate and average wait
- REST report API with scoped tokens
- Grafana dashboards included
- Power BI over a read-only role
Licensing
- Offline signed license — no internet needed
- Edition + capacity caps per deal
- Annual term with a grace window
- Renew by uploading a new license
- Node count enforced by the license
Frequently asked questions
Self-hosted unified communications, answered.
Is Bulwark Voice Suite a Cisco Call Manager alternative?
Yes. It delivers Cisco Call Manager-class call control — extensions, hunt groups, ACD queues, IVR, voicemail, shared lines, park, pickup, transfer, forward, paging and CDR — on a self-hosted server you own, with Cisco gateway presets for easy migration.
Can it run completely offline or air-gapped?
Yes. Bulwark Voice Suite is offline-first. Every engine is bundled in one signed installer, nothing is downloaded at the customer site, and licensing is verified from an offline signed file — so it suits air-gapped and restricted networks.
Is it a self-hosted alternative to Zoom or Microsoft Teams?
For voice and video, yes. Browser WebRTC meetings and SIP video room systems join the same conferences on your own infrastructure — no third-party cloud, with presence and instant messaging included.
What phones, SIP trunks and gateways are supported?
Standard SIP hardphones and softphones, SIP VC equipment, and PSTN via SIP trunks, PRI gateways and FXO/FXS (ATA) gateways — using Cisco presets or generic profiles, with secure or plain trunking selectable per provider.
How is it deployed and updated?
One self-contained signed installer with a guided setup wizard. Each capability runs as its own service, and you update by applying the update package on top — with automatic rollback if a step fails. On-prem or private cloud.
How is Bulwark Voice Suite licensed?
By an offline signed license with an edition and capacity caps set per deal, on an annual term with a grace window. No internet connection is required to run or verify the license.
Bring your communications in-house
On-prem or private cloud. A pilot takes a day to stand up.