Open source
Freedom to build, customize and innovate.
Open sourceNext-generation voice PBX
Your Voice.
Your Platform.
Your Control.
Modern Control Plane.
Proven Media Engine.
Built for What's Next.
Secure by Heart,
Freedom by Design,
API-first by Architecture,
ready for automation and Voice AI.
Why CaptainPBX
More than a PBX — a complete communications platform for the next era.
Modern architecture
A powerful control plane with a proven media engine.
Rich integrations
Connect your ecosystem through APIs.
Voice AI ready
Build intelligent voice experiences.
Enterprise grade
Secure, reliable and scalable.
Architecture
A modern control plane. A proven media engine.
Edge · Nginx with TLS · Captain Shield
Control plane
React admin and portal. Captain Core and modules on PHP and Symfony. Jobs stay off the request.
API
One catalog. OpenAPI and a tenant JWT on /api/v1. The screen is a client of that catalog.
Data
MariaDB holds tenant records. Redis carries streams and queues.
Media engine
Asterisk with PJSIP. Configuration is generated. The application does not edit the engine’s system files.
Voice AI
Captain AI transcribes and summarizes. It is a destination of the architecture, ready to integrate.
Privilege · captain runs the application · asterisk runs media · only the system agent is privileged
Platform
What the platform runs.
Many offices
One engine, fail-closed tenants, a SIP domain and a token for each office.
Queues
Agents, callers, and service levels on a live lane of their own.
Visual IVR
A form and a canvas of the same call flow.
Cradle to grave
Every step of a call, from the first ring to hangup, on one CDR.
Captain Insights
Queue, IVR, and call reports. CSV, JSON, and PDF.
Captain Vault
Encrypted backup and restore, including secrets and appliance state.
Security
Secure by design.
Captain Shield
Default deny on the host. Allow only what you name.
Captain Auth
Identity is not an extension. TOTP policy is Off, Optional, or Required.
Captain Trust
TLS certificates for the appliance: inventory, import, and deploy.
Captain Audit
Who changed what. Secrets are redacted in the record.
Captain Vault
Encrypted backup when you need the whole appliance back.
Three accounts
captain runs the app. asterisk runs media. Only the system agent is privileged.
API-first
The screen and the API are the same catalog.
OpenAPI describes it. A tenant JWT calls it. Your tools use the same plane as the admin screen.
/api/v1One prefix for the product catalog.
OpenAPIThe contract ships with each module.
Tenant JWTA token scoped to one office, not the browser’s guess.
Automation and Voice AI
Ready to automate. Ready to transcribe.
Jobs leave the request path. Captain AI owns transcription, sentiment, and summaries. A model is a destination you connect, not a claim that it already answers every call.
JobsWork runs beside the request, on Redis.
EventsCalls, queues, and presence stay on separate lanes.
Captain AITranscription and insight, ready to integrate.
Multi-tenant
One engine. Many offices. Fail closed.
The browser never chooses the tenant. Isolation is the default, so one office cannot see another.
OfficesMany tenants on one appliance.
SIP domainsA domain of its own for each tenant.
TokensAPI access is issued per tenant.
Open source
Your hardware. The source. No subscription.
Run it
One appliance, on hardware you own. No subscription to start.
Read it
Captain Core and every module are yours to inspect.
Extend it
The same API the screen uses is the way you add to it.
Like it? Help it grow. Sponsorship, support, a paid feature, or a white label.