FreePBX 14, 15, 16, 17 and FreePBX-based distributions — full editor (read + write). The shared walker reads schema common to the FreePBX family, so most distros built on it work the same way, including commercial distros like PBXact and ClearlyIP, the community Incredible PBX, and the various OEM/whitelabel boxes built on FreePBX 14–17. Self-hosted is the keyword — CFS installs over SSH as root, so hosted-only platforms where you don't get shell access (e.g. PBXact Cloud) aren't supported. VitalPBX — dedicated walker, ships as a read-only visualizer (see "Why is VitalPBX read-only?" below). It renders the full VitalPBX dial plan — every routable destination type, including IVRs, queues, ring groups, time conditions, and call flow control. The platform is auto-detected at install from /etc/amportal.conf, /etc/freepbx.conf, or /etc/vitalpbx/database.conf. Vanilla Asterisk without one of these front-ends isn't supported — CFS reads each platform's config tables, not raw extensions.conf. Don't see your PBX? Email support@callflowstudio.io — we add platforms when there's demand.
On VitalPBX, Call Flow Studio is a first-class read-only visualizer — the same graph, the same live registration, the same time-travel and path highlighting, the same export, the same sticky notes you get on the FreePBX family. The two platforms simply handle configuration changes differently: Call Flow Studio's editing is built on the FreePBX family's own configuration tools, while on VitalPBX, making changes lives in the VitalPBX admin UI, where it's always lived. So on VitalPBX, Call Flow Studio focuses on what it does best — giving you the complete, live picture of your whole dial plan. If editing becomes possible on VitalPBX in the future, we'll add it.
CFS doesn't write SQL into your PBX's database. When you save an IVR, queue, or ring group, it calls FreePBX's own module functions — the same code FreePBX runs when you press Submit in its admin screens — and then triggers the same fwconsole reload you'd run yourself. Undo and redo go back through those same functions. Every change CFS makes is an ordinary FreePBX change, then: reversible, auditable, and visible in whatever admin UI you already use. Point it at a test DID first if you want to build confidence.
Undo isn't a feature in your PBX admin UI. It is in Call Flow Studio. Ctrl-Z reverts the most recent destination change in the dial plan you're viewing; Ctrl-Y redoes. Past that, the Activity Log tab shows every edit ever made — who, when, what — with a per-row revert button that works across dial plans. Apply Config surfaces automatically after every revert so the change goes live the moment you're ready. (Undo and the log cover destination edits, IVR entries, and Dynamic Route entries. Call flow control toggles appear in the log but aren't undoable — they have their own confirmation prompt. Node creation and time-group edits aren't in the log yet.)
No. Your dial plan, extensions, recordings and call records never leave your server; CFS has no way to send them and never asks for them. The only thing it contacts is our licensing server, and only to check that your license is valid. That check sends a short, fixed list: a hashed machine fingerprint, hostname, PBX brand and version, OS, PHP version, CFS version, license key ID, and on VitalPBX the number of tenants. Nothing else. It runs at install, when an admin logs in, and once a day from cron. There's no analytics and no tracking, and the product loads no CDN and no external JavaScript, so nothing on the page phones home either.
Everything runs on your own server. There's no cloud component, no CDN, and no third-party JavaScript; the whole app is served from your PBX, so your dial plan never leaves it.
CFS also doesn't write SQL into your PBX's database. Edits go through FreePBX's own module functions, the same code FreePBX runs when you press Submit in its admin screens, and undo and redo take the same route.
A CFS login isn't a PBX admin login. No CFS user, whatever their role, can reach SIP trunks, system settings, or delete an extension. The worst a stolen CFS account can do is change dial-plan destinations, and every change is recorded in the Activity Log with who made it and when, and can be reverted.
No release ships unless it passes an automated security suite. If the suite fails, the build stops and there's no tarball to publish. It covers SQL injection, authentication bypass on every endpoint, privilege escalation (a read-only account can't reach an editing action, and an editor can't reach an admin one), cross-site request forgery, open redirects, login throttling and password-spray lockout, session invalidation (disable a user and their active session dies on the next request), idle timeout, cookie flags (HttpOnly, SameSite, Secure), security headers, and information disclosure: a logged-out visitor can't learn your hostname, PHP version, or PBX version from the login page. Once a release is out, the same suite runs again against every PBX in our test lab.
If you find something we missed, email support@callflowstudio.io. It goes straight to the developer.
No. CFS runs its own user system, completely separate from your PBX admin auth. Three roles: admins manage everything, technicians edit dial plans and can jump straight into your PBX admin for anything outside CFS's scope, and users get read-only access — pan, zoom, search, and reload the graph but never edit. Hand out CFS logins to junior techs, customers, or end users without giving them PBX admin access. The shareable URL is https://<PBX_URL>/cfstudio — pair it with a user login when you want to walk someone through a call flow on the phone while making changes live.
Call Flow Studio is served from your PBX at https://<PBX_URL>/cfstudio — on the same web server your PBX admin already uses. It opens no new ports and exposes nothing that wasn't reachable before, so a CFS login reaches it exactly the way it reaches your PBX. If your PBX is internet-facing, a remote tech or customer can sign in from anywhere; if it's on-prem behind a VPN or firewall — as many are — CFS is reachable to whoever's already on that network. Either way it's a separate read-only login with no PBX admin access, so handing someone a view never widens what's exposed.
Install free and run the full product for 30 days — full editing on the FreePBX family, unlimited tenants on VitalPBX, no credit card. After 30 days Call Flow Studio settles into a free tier you keep for good: on the FreePBX family that's the complete read-only visualizer; on VitalPBX it's a read-only visualizer for your first two tenants (CFS is read-only for everyone on VitalPBX — see above). One Call Flow Studio license ($79 early access, $129 standard, one-time and per-PBX) keeps the full experience: editing on the FreePBX family, unlimited tenants on VitalPBX. No paywall and no locked-out screen — we never delete your data, and if a license ever lapses the install simply drops back to the free tier.
Settings → License → Release License on the old server, upload the same key on the new one. Self-service several times per year; after that, email us. If the old server is dead, we have a force-release flow. Your license, your hardware.
Call Flow Studio is the actively-developed, commercial successor to dpviz — same developer. Two things people get wrong: FreePBX has no native call-flow visualizer (dpviz is the free community module that fills it), and dpviz isn't abandoned — it's still maintained. dpviz is the focused FreePBX module that renders your dial plan as a graph, with live registration, time simulation, and node creation fitted around the visualizer. CFS is the bigger thing those years of feature requests turned into: drag-to-create as the primary workflow, undo/redo with a per-edit activity log, CFC toggles from the canvas, sticky notes, edge annotations, an In-Use-By reverse walk, and PNG export with optional PII sanitization — across FreePBX and VitalPBX. dpviz stays lightly maintained, not abandoned. Full comparison →
CFS is focused — dial-plan visualization, live status, and editing. These are intentionally out of scope, and well-served by other tools:
Yes — you can install Call Flow Studio today. The first 30 days are a full trial of everything, then it settles to a free read-only visualizer; an optional one-time license keeps the editor (FreePBX family) or unlimited tenants (VitalPBX). Get Call Flow Studio.