Toll fraud
A public SIP platform is continuously probed by automated systems trying to place international calls at the operator’s expense. We observed this within the first hours of exposure.
Ironitia lab · Built in-house · 2026
A carrier-grade telephony platform, built from scratch and run in real conditions
Ironitia does not recommend what it has not tested. To exercise our methods against Internet exposure, fraud, high availability and artificial intelligence on the phone, we built a complete carrier-grade telephony platform in-house, with no client and no commission.
LAB / SCOPE
Why a lab
This project runs alongside client work as a full-scale sandbox. Its purpose is not to sell a platform, but to apply our methods without compromise and expose their limits with us before they appear in a client environment.
It is multi-tenant by design, exposed to the Internet because phones connect from anywhere, and expected to remain available through its own updates.
The stakes are operational
Service continuity
A telephony platform cannot stop for an update or drop calls because a server restarts.
Control over AI
Putting artificial intelligence on the phone requires control over cost per minute, permitted claims and handover to a human.
UNDERSTAND / OBSERVE / STABILISE
The method, with no safety net
We first understood and observed: security audits on real traffic, comparison with contact-centre requirements and code reviewed from several independent angles before decisions were made.
We prioritised through a dated risk register in which every known defect has a severity and rationale, including issues deliberately deferred.
Transformations were delivered in bounded batches with acceptance criteria written before code, six-angle review before sensitive releases, operating procedures, real-condition validation and a planned rollback.
What we built
A signalling and media stack written natively in Rust, without a third-party telephony engine, interoperable with standard phones and carrier trunks. WebRTC, fax, conferencing, transfers, call queues, IVR and voicemail are included.
A two-node high-availability cluster with automatic failover and a distributed database, updated through progressive releases without interrupting service.
Defence in depth against fraud and AI voice reception capable of understanding a request, transferring to a human and producing a written summary, with controlled knowledge and fallback chains.
MEASURED / REAL TRAFFIC
What we measured
- Over 72 hours of real traffic: 736 hostile call attempts received, 708 rejected, no successful fraud and no suspicious call billed.
- More than 160 production releases over five months without service interruption.
- Automatic recovery in about thirty seconds after the hard stop of a node.
- AI voice reception in service, with human handover and automatic written summary.
What this proves — and what it does not
It demonstrates an end-to-end ability to design, secure and operate critical telecom infrastructure, including voice AI, and to apply our operating method under real constraints.
It does not demonstrate behaviour at scale: there is one tenant, our own, with no client and no commercial operation. The lab is evidence of capability, not a disguised client case study.
What we take from it
- An edge firewall is not enough when legitimate phones arrive from arbitrary addresses; classification must also happen inside the application, close to the protocol.
- A large automated test count means little until actual coverage of the production path is measured.
- An AI on the phone must be constrained as much as it is capable: it promises only what is documented and knows when to hand over.
LIVE / RECEPTION
Speak to what we built
Discuss your infrastructure through the contact form, or call the reception line to speak with the AI voice assistant operated in this lab.
Reception line
+33 9 72 67 52 99Our AI voice assistant understands your request and can connect you with a member of the team.
This number is answered by an artificial-intelligence voice assistant. The conversation is processed by a third-party provider and may result in a written summary sent to Ironitia. Do not share sensitive information; the contact form remains the reference channel. How voice conversations are processed.