DEV3 Vestibell – Visitor Management SaaS Laravel Script with QR Invites, Kiosk Sign-in, Badges & Roll Call

Vestibell is a visitor management app for companies with one or more sites: offices, factories, depots, clinics and school front desks. It is built by DEV3 Technologies on Laravel 12 and Filament 4. You run it as the operator: you sell plans to companies, and each company manages its own sites, entrances, hosts, visitor types and visitors.

What it does

• QR invites. Hosts pre-register one visitor or a group, once or on a schedule. The visitor gets a page with directions, the site rules, a signed QR code and pre-check-in for questions, agreements and the induction.
• Tablet kiosk (installable PWA). Pair a tablet with a one-time code, then visitors scan their invite or sign in as a walk-in, sign out with their badge, or drop off a delivery. If the connection drops, sign-ins are saved on the kiosk and sent when it is back, with every rule re-checked.
• Questions, agreements and inductions. Per visitor type: conditional questions with deny rules, agreements signed with a finger (versioned, so a changed text asks again), and an induction with material and a scored quiz that expires.
• Badges. Print from the browser on common label and card sizes, with name, photo, host, type and a QR code.
• Front desk. Everyone on site as cards, approvals from hosts or reception, identity checks when a walk-in types an existing visitor's e-mail, automatic sign-out after hours and a deliveries inbox with PIN or signature collection.
• Watchlist. Names you maintain, fuzzy matching, deny or alert, every answer audited.
• Evacuation roll call. Start a drill or a real evacuation, marshals mark people safe on a phone, signed-out visitors count as accounted for, and a PDF report is kept.
• Hosts on a phone. A mobile page to see your visitors, approve requests and send invites.
• Operator panel and API. Companies with usage meters, plans, billing and audited view-only support sessions. A scoped REST API with an OpenAPI document and signed webhooks, including a webhook for door or Wi-Fi systems.

Quality checks

The release passed seven gates on the final code: Larastan level 6 with 0 errors, Pest, a build inside the page budget, migrations and the full demo seed on MySQL 8 and SQLite, a headless browser run that pairs a kiosk, signs in a walk-in with a drawn signature and an induction quiz, signs out, then goes offline and syncs the queued sign-in, race checks on MySQL (parallel sign-ins, approvals, roll call marks, offline sync and parcel collection), the installer driven from the zip, and a secret scan.

What you should know before buying

• The kiosk runs in any tablet browser and installs as a PWA. HTTPS is needed for the camera. QR scanning uses the browser's barcode detector (Chrome and Android); otherwise visitors type the invite code. Badges print through the browser, so you need a printer that accepts browser printing.
• No face recognition, no ID-document OCR and no door or turnstile drivers. Doors and Wi-Fi are reached through a signed webhook only. There are no native mobile apps.
• Watchlists are lists you maintain. There is no government or sanctions database.
• Visitor data retention is a setting per company. You are responsible for your privacy notices and for local law; an editable template is included, and Vestibell makes no compliance or certification claim.
• Simulated drivers. Mail, SMS and push have working simulated drivers; real ones need your own accounts. The offline queue covers sign-ins only: sign-out and deliveries need a connection.
• Use MySQL or MariaDB for a live site. A cron entry every minute is required; no queue worker is needed.

Included

Source code, the web installer, a buyer guide, demo data with three fictional companies (a robotics maker, a law firm and a logistics group), a cron entry for the scheduler, and six months of support.