E164-Arpa Auditor (ArpaGuard)

Who it's for

SaaS telephony developers and self-hosted Asterisk/FreePBX operators who currently use manual routing dial-plan checks and post-incident billing alerts.

The problem

Financial and legal risk. Misconfigured e164.arpa lookups or wildcards can route thousands of concurrent internal SIP calls to malicious external carriers, racking up $10,000+ in carrier fees in minutes.

How to build it

A lightweight self-hosted daemon (Go) with a web UI dashboard that parses Asterisk/Kamailio configuration files and live SIP dial plans, flagging mismatched top-level ENUM lookups.

How it makes money

SaaS VoIP operators and small call centers pay $39/month for the continuous daemon license to avoid catastrophic carrier billing spikes and potential telecom compliance fines.

Why it doesn't exist yet

Incumbent telecom monitoring suites focus on post-billing fraud detection rather than pre-route validation, and indie builders have only recently started running deep local-first VoIP integrations where complex e164 formatting is handled programmatically.

First users

Indie VoIP developers and virtual call-center operators on HN who saw the viral post about logging hundreds of thousands of calls to military bases via accidental e164.arpa resolution and want to secure their trunk lines instantly.

Build size

1 developer x 4 weeks. Includes a configuration parser for Asterisk/Kamailio/FreePBX dial plans, a validator engine that checks outbound ENUM/e164.arpa rules, and a lightweight web status UI.

Biggest risk

The risk is minimal because incumbents do not prioritize the niche self-hosted open-source PBX market, preferring to upsell enterprise cloud migration packages instead.

Conditions for a hit (all 3 required)

• Configuration parser that ingests Asterisk dialplan extensions.conf files and flags any unregulated ENUM lookup patterns using wildcard rules.
• A dry-run testing suite that simulates 1,000 randomized international phone number variations to verify they do not resolve to untrusted DNS names.
• A real-time edge monitor that alerts via Slack/Webhook within 500ms if an outbound SIP call attempts to resolve an address via a public e164.arpa registry without explicit domain pinhole rules.

How it's judged (in 6 months)

GitHub repository of the shape reaching 300 stars or finding at least 3 distinct self-hosted Asterisk deployment installations documented in public issues.(judgment date 2027-02-22)

AI self-confidence 78/100 — self-reported likelihood of meeting the criterion, not a business success rate