๐Ÿ’ณ Billing, provisioning and support in one self-hosted app. Free to use, source included, no ionCube, no licence server. Compare with WHMCS โ†’
๐Ÿงช Early development โ€” not production ready. Looking for hosts to test it โ€” get in touch โ†’
Features

Run the business side of hosting from one place.

Everything below is built and working in the v0.2 preview. Each area covers the everyday flows end to end; depth grows with every release.

๐Ÿ’ทBilling & invoicing

Recurring billing that gets the details right.

  • Renewal invoices created days ahead (you choose how many), one invoice per client, with due dates that only ever move forward.
  • Two-level tax rules by country and state, tax-exempt clients, credit balances, partial payments, refunds and printable PDF invoices.
  • Multi-currency pricing per product and billing cycle, with each client billed in their own currency. UK defaults: GBP, Europe/London.
  • Quotes for clients or prospects: line discounts, PDF, a private link to accept or decline, and one click to turn an accepted quote into an invoice.

๐Ÿ›๏ธKarnakPanel server module โ€” included

Full account automation for your KarnakPanel servers, out of the box.

  • Create hosting accounts automatically when an order is accepted or paid, on the package you choose, with the order's domain added.
  • Suspend and unsuspend automatically with smart dunning when invoices go overdue and get paid.
  • Delete (terminate) accounts and change passwords, from the admin area or on your dunning schedule.
  • Optional client self-service from the service page: domains and free SSL, DNS records, mailboxes and forwarders, MySQL databases, backups and rewrite rules โ€” switched on per product.
  • Talks to the KarnakPanel API over verified HTTPS with an admin token; account creation runs in the background so checkout never waits. About KarnakPanel โ†’

๐Ÿ”Smart dunning

Collect more, annoy less.

  • Your own schedule of reminder, card retry, late fee, suspend, terminate and collections steps, measured in days from the due date.
  • Hard declines (lost, stolen, expired cards) stop further retries straight away; soft declines retry on schedule.
  • After downtime it catches up within a window you set, and skips steps that a later one supersedes โ€” no burst of five emails at once.
  • Pause dunning per client, exempt clients from late fees, and see every step taken on every invoice, plus a recovery report.

๐Ÿ’ณPayments

Hosted checkouts โ€” card numbers never touch your server.

  • Stripe Hosted Checkout and Mollie (cards, PayPal, iDEAL, Klarna and whatever your Mollie profile enables), plus bank transfer.
  • Saved cards and Mollie mandates charge renewals and dunning retries automatically; refunds go back through the gateway.
  • Payments are recorded only from data fetched from the provider, with signed webhooks, idempotency keys and duplicate protection.
  • Gateway modules use the WHMCS convention (_config, _link, _capture, _refund).

๐Ÿ›’Products, orders & order forms

Sell plans the way you want them shown.

  • Product groups, billing cycles from monthly to triennial, setup fees, configurable options, addons, stock control and promo codes.
  • Orders with pending/accept/cancel/fraud flow, automatic setup on order or on payment, and a fraud-check module slot.
  • Visual order-form builder: card, list or comparison layouts, featured plans with badges, upsells and drag-and-drop ordering.
  • A/B test two layouts per product group and compare daily views and orders.

๐Ÿ–ฅ๏ธProvisioning & domains

WHMCS-style modules, so you are not starting from zero.

  • Server modules: create, suspend, unsuspend, terminate, change password and package, plus custom admin and client buttons. Servers picked automatically by group.
  • Registrar modules: register, transfer, renew, nameservers, lock and EPP codes, with daily sync and grace / redemption periods per TLD.
  • Compatibility layer: add_hook, localAPI, logModuleCall, WHMCS\Database\Capsule and read-only tbl* views for module queries.
  • Every module call is logged; failures leave the service pending and visible instead of half-created.

๐ŸŽงSupport desk

Tickets, knowledgebase and news, in the same app.

  • Departments, statuses, assignment, predefined replies and private staff notes that clients never see.
  • Email piping: replies thread onto the right ticket, new emails open tickets by department address, bounces are ignored.
  • Guest tickets with private links, safe attachments (scripts and HTML always refused), and auto-close of quiet tickets.
  • Knowledgebase with voting, and announcements on the client area home page.

๐Ÿ‘ฅClient area

The "Nebula" theme: dark, glassy and easy to use.

  • Services, domains, invoices, quotes, tickets, email history and account details, with a store and cart.
  • Sub-accounts with their own logins and permissions (billing, support, services, emailsโ€ฆ).
  • Password reset with single-use, expiring tokens; client logins kept separate from staff logins.
  • Optional UK postcode address finder on signup and account forms: enter a postcode and house number, pick the address (needs an Ideal Postcodes key).

โš™๏ธAutomation, email & reports

One cron line does the rest.

  • Cron runs invoicing, dunning, domain sync and ticket auto-close; a background job queue retries failed work with back-off.
  • Branded HTML emails in the panel's dark blue style with button links and a plain-text version; editable templates for every event, a full email log, and delivery via PHP mail or SMTP.
  • Reports for income, invoices, MRR by product, top clients, dunning recovery and more โ€” with CSV export.

๐Ÿ›ก๏ธSecurity

Built in, not bolted on.

  • Staff two-factor authentication (TOTP), role-based permissions and login lockouts per user and per IP.
  • An audit log of every staff and API change, CSRF protection on every form, and secrets encrypted at rest (AES-256-GCM).
  • API credentials tied to a staff role, with optional IP allow-lists and rate limits.
  • Built-in spam protection for signups and guest tickets, with no outside service: a question, an invisible browser check (proof of work), email-domain and throwaway-inbox checks, link limits and blocked words.

๐ŸššInstall & migrate

From upload to first invoice in one sitting.

  • Web installer with requirement checks: upload, open /install/, follow the steps.
  • WHMCS migrator: clients, contacts, products and pricing, services, domains, invoices, transactions and tickets, keeping WHMCS IDs. Always a dry run first.
  • A REST API with WHMCS action names (GetClients, CreateInvoice, AddInvoicePaymentโ€ฆ) so existing scripts can point at HostBMS.
๐Ÿงช

Want to try it?

HostBMS is in early development. Testers get early builds and a direct line to us.