The customer calls first
A trunk silently degrades the ASR from 90% to 70%. Global thresholds never see it. The ticket arrives from the client, not from monitoring — with the SLA already expired.
AI-POWERED DIAGNOSTICS · 100% SELF-HOSTED · EMPOWER YOUR NOC
Empower your NOC team with AI: Instant root-cause evidence without hours of manual packet hunting.
VoxyWatch doesn't replace your engineers — it gives them superpowers. It automates the tedious, repetitive work of sifting through raw PCAPs and correlating routes in seconds, delivering clear evidence directly to your NOC so they can troubleshoot and report to carriers 10x faster.
Install in one line — free tier, no card:
curl -fsSL https://raw.githubusercontent.com/VoxyWatch/publish/main/install.sh | sudo bash Superpowers for your NOC team100% self-hosted
The problem
Your client detects the fault before your NOC
Every minute it takes you to detect a voice quality problem is a minute your customer is already considering leaving.
2–4 hours per incident
Wireshark, grep in SBC, manual captures and correlation by hand. Each incident burns up senior engineer hours while traffic continues to fail.
Days waiting for the manufacturer
Without evidence of your own, the diagnosis ends in a ticket with the manufacturer of the SBC. Days of waiting, generic answers and zero control over the timeline.
Without knowing which carrier is failing
Carrier A or Carrier B? Destination or route? Without attribution by trunk and by country, conversations with suppliers are competing opinions, not evidence.
AI-AUGMENTED NOC
The AI co-pilot that multiplies your NOC team's speed and precision
DETECT → INVESTIGATE → DIAGNOSE → EVIDENCE ALERT → LEARN
Unified incident engine
Eliminates alert fatigue for your engineers. Deduplicates noise into clear incidents with an auditable timeline, allowing your team to focus strictly on real degradations.
Instant deep telemetry investigation
Saves hours of manual Wireshark packet digging. VoxyWatch isolates failing IP routes, sample calls, and dominant SIP error codes in seconds, delivering rock-solid evidence for your engineers to make decisions.
Actionable alerts for your engineers
Delivers complete root-cause diagnostics to Telegram, Email, Teams, or Slack with one-click action buttons: Acknowledge & Investigate. Keeps your team ahead without stressful 3 AM blind hunting.
Traffic intelligence
Flash Call detection and fraud early warning
Find automation and abuse patterns from the signaling you already capture, without depending on the SBC brand.
Flash Call Detector
Detects probable missed-call authentication patterns from originator CANCEL timing, 487 responses, no-answer/no-media evidence and destination fan-out.
- Always passive and in Shadow
- Deterministic, local and token-free
- HEP and SIPREC, vendor-agnostic
Anti-fraud intelligence
Surfaces new destinations, high-risk country growth, short-call storms, velocity changes and international-mix anomalies with evidence by trunk.
- Risk score with supporting signals
- Per-trunk learned behavior
- Runbooks and auditable incidents
VoxyWatch observes and explains. It never blocks, reroutes or controls the SBC.
Who it's for
Built for teams operating real voice networks
Carriers, ITSPs, UCaaS providers, and voice integrators. Vendor-agnostic, multi-SBC, self-hosted.
Carriers
A NOC view of every interconnect: ASR/NER by route, anomaly detection by trunk, and 5xx spikes flagged as they happen.
ITSPs
Visibility by customer, quality by destination, carrier attribution via ITU-T E.164, and audio evidence when you need to prove what happened in a call.
UCaaS providers
Auditable voice quality by tenant: MOS, jitter, packet loss, and PDD. Detect degradations before customers escalate.
Voice integrators and MSPs
Diagnose calls without escalating to the SBC vendor. Incident analysis with evidence across multiple platforms.
VoxyWatch
From a SIP packet to the action your NOC needs to execute
Capture, attribute, learn and explain — all in a single self-hosted binary.
Carrier and country intelligence
Load your trunks only once. Each call is attributed to its carrier by IP/CIDR and to its destination country via an ITU-T E.164 engine with longest match. ONNET traffic marked separately.
Automatic baselines per trunk
Each trunk learns its own normal (mean ± σ per hour). Detects silent drifts that global thresholds miss — like a ASR dropping from 90% to 70% on a single carrier.
AI co-pilot for NOC — your own key
Co-pilot by trunk and summary: reads health + baseline + 48h trend, returns probable cause and action for NOC. Works with OpenAI, Anthropic, Gemini or OpenRouter. Never touch the SBC.
Embedded SNMP agent + traps
Integrated SNMP v2c/v3 agent with traps per edge for capture loss, sniffer down, low ASR/MOS, disk/CPU/RAM pressure. Downloadable MIB. Integrates with PRTG, Zabbix, Nagios.
Call audio transcription & Speech-to-Text
Generate searchable text transcripts directly from captured call audio. Interactive synchronized stereo playback, multi-format export (TXT, JSON, SRT), and 100% privacy on your own server.
Portable call evidence
Export SIP findings, DTMF evidence, PCAP and a bounded anonymous call-share bundle without exposing raw traffic or full identifiers.
100% VENDOR AGNOSTIC
Three universal capture methods cover 100% of network topologies
Native encapsulation via HEP, session recording via SIPREC, or direct packet mirroring via SPAN Port / Port Mirror.
HEP (v1 / v2 / v3)
Native HEP Encapsulation
Native encapsulation protocol for SIP signaling and RTCP telemetry over UDP or TCP (port 9060). Ideal for SBCs and PBXs with native export support.
voxywatch-probe — view on GitHub ↗ SIPREC (SRS Nativo)
SIPREC Session Recording
Standard Session Recording Server (RFC 7865/7866). Allows SBCs to stream voice sessions and metadata directly into VoxyWatch.
PORT MIRRORING / SPAN
Port Mirroring / SPAN
Passive traffic mirroring straight from the switch or NIC. Recommended when the SBC does not export HEP or SIPREC.
use cases
Real use cases
From theory to diagnosis in minutes.
Debug a carrier interconnect
Filter by status = failed, open any call and the SIP diagram shows the INVITE → 100 → 486. Root cause confirmed in less than 5 minutes.
Audit recordings SIPREC
Reconstructs the audio, listens by channel, and traverses with jitter and RTCP to locate exactly where the client's audio was cut off.
Validate a new SBC
Make test calls and verify that they appear with correct numbers, high MOS and clean diagrams before going to production.
Who built it
Built by network engineers with real experience operating carrier-grade voice networks.
VoxyWatch is not a generic observability platform that SIP learned last quarter. It's designed by people who have operated voice networks — and built specifically for the engineers who do.
FAQ
Frequently asked questions
What we get asked the most before we start.
How do I cancel my subscription?
Open the Stripe customer portal and cancel in one click — link below. Your license remains active until the end of the period.
Open Stripe portal →Do you accept bank transfer, PayPal or Stripe?
Yes, upon request. Write to [email protected] with the method and duration you prefer, and we will coordinate it.
Can I upgrade from Pro to Telco without losing what I already paid?
Yes. Open a support ticket and we will credit the unused portion of your Pro license towards the Telco plan.
What happens if my server breaks or I need to change hardware?
Open a support ticket. We reissue your license for the new HWID. Same plan, same expiration.
Do you issue an invoice for my accounting?
Yes. Open a support ticket with your tax information (company name, RFC/Tax ID, address) and we will send a formal invoice.
Can you bill me in MXN, EUR or another local currency?
Upon request. Open a support ticket with the currency and duration, and we coordinate outside of Stripe's default USD flow.
What happens when my license expires? Do I lose my data?
No. Your CDRs, audio recordings and settings remain intact on your server. Only new captures are paused until you refresh.
Does VoxyWatch send data to the cloud?
SIP traffic monitoring, call capturing, and network observability run 100% locally on your server (zero cloud dependencies). The optional AI copilot uses external LLMs (OpenAI, Anthropic, Gemini, or OpenRouter) with your own API key (BYOK), connecting directly from your server to the provider without passing through VoxyWatch servers.
Is there a free trial period?
Yes. The Free tier (100 concurrent calls and unlimited CDRs) is free for life. No card or license key is required. You install in 60 seconds.
Can the AI agent change my network?
No. VoxyWatch and its AI engine are strictly read-only and evidence-based. The system does not have any tools or permissions to touch your SBC or modify your network configuration — by design. It provides actionable diagnostic evidence so your NOC team can resolve or report issues with carriers with full proof.
Does VoxyWatch replace NOC engineers?
No, not at all. VoxyWatch is built to empower your existing NOC team, not replace them. It automates the tedious, repetitive work of sifting through raw PCAPs and correlating failing calls in seconds. This eliminates engineer burnout and stressful 3 AM troubleshooting, allowing your team to resolve issues 10x faster and present clear, evidence-backed reports to leadership and carriers.
How does the AI Copilot handle privacy?
It's bring-your-own-key. You configure your own API key of OpenAI, Anthropic, Gemini or OpenRouter. Requests go directly from your VoxyWatch to the provider you choose. VoxyWatch never sees the data and never passes through our servers.
Do you have a partner or referral program?
Yes. We offer a referral program for VoIP consultants and integrators. Email us at [email protected] for details.
How can I reach support directly on WhatsApp?
You can chat directly with our team on our official WhatsApp line.
Open WhatsApp Chat →