MWX.Systems Ask for quote

About

The team behind
the systems

Network engineering · Cybersecurity Tier 3 · Philippines

MWX Systems builds the software Philippine businesses run on and engineers the networks underneath it. The company exists because those two jobs are usually sold by different vendors who then blame each other — and the business in the middle is the one that loses a day of trading.

08Products built
04Networks operated
Tier 3Cybersecurity
PHDesigned and supported

History

How MWX started

The pattern behind it

Years of running production infrastructure taught the same lesson over and over: the outage is rarely where the vendor said it would be. An HR system goes down and the software provider blames the network. The network provider says the server is fine. The business waits while two companies argue.

Meanwhile the things that actually save you — a backup somebody has restored, a second internet line that fails over on its own, a network where the guest wifi genuinely cannot reach the accounting server — are the things nobody sells, because they are invisible when they work.

MWX Systems was built to deliver exactly those, with one team accountable for the application and the infrastructure it sits on.

Background
Discipline
Network engineering — routing, switching, segmentation and multi-site design
Security
Cybersecurity Tier 3 — hardening, monitoring, incident handling and response
Development
Full-stack: desktop, web and mobile applications in production use
Operations
Virtualisation, storage, directory services and disaster recovery, run daily
Scope
Multi-site enterprise networks, eight business platforms, and the automation and hosting around both

How we work

Four things we will not
bend on

These are not slogans. Each one comes from a specific incident that cost somebody a day, and each one changed how we work afterwards.

01 / Recovery

A backup nobody restored is not a backup

Scheduled backups pass their own checks right up until the day you need one. We restore on a schedule, from the actual archive, and treat a failed restore as an outage in itself — because that is when it is cheap to find out.

02 / Discretion

Your network stays off our marketing

We name a client only when they have agreed to it, and we never publish topology, addressing or equipment inventory for anyone. A portfolio that tells an attacker where to start is worth less than the work it advertises.

03 / Honesty

Assessment before proposal

Most networks do not need replacing, and most businesses do not need all eight systems on day one. We look first, then quote for what actually earns its cost — including telling you when the answer is "nothing yet".

04 / Ownership

One team, both ends

Software fails for network reasons and networks get blamed for software problems. When the same team owns the application and the infrastructure beneath it, that argument never happens and the fix starts immediately.

Tech stack

What we actually build with

Not a list of everything we have heard of — these are the tools currently carrying production workloads, chosen because they suit the job rather than because they are new.

Desktop

.NET

  • C# and .NET
  • WPF desktop clients
  • Windows service integrations

Where a business needs a real desktop application on the floor, not a browser tab.

Web

Laravel & PHP

  • Laravel, PHP 8.x
  • Blade, Livewire
  • nginx + PHP-FPM

The backbone of the business platforms — HR, records, accounting and inventory.

Front end

Next.js & React

  • Next.js, React
  • Tailwind CSS
  • Node runtime

For public sites and content-managed front ends that have to be fast on mobile data.

Mobile

Flutter

  • Flutter — iOS and Android
  • Offline-first sync
  • Biometrics and push

One codebase, both platforms — which is why mobile ships with the system instead of after it.

Data

Databases

  • PostgreSQL, MariaDB / MySQL
  • Microsoft SQL Server
  • Redis, PgBouncer

Chosen per workload, pooled and cached so the database is not the thing that falls over first.

Virtualisation

Proxmox & VMware

  • Proxmox VE — VMs and LXC
  • VMware vSphere / ESXi
  • ZFS storage, replication, HA

Where the workloads live, with snapshots and a standby copy as standard rather than as an upsell.

Directory

Windows Server

  • Active Directory, DNS, DHCP
  • Group Policy
  • NPS / RADIUS for VPN and wifi

Single sign-on, controlled access, and one place to disable an account when someone leaves.

Network

MikroTik & Cisco

  • RouterOS — routing, firewall, VPN
  • Cisco IOS switching
  • WireGuard, IPsec, VLANs

The multi-site layer: failover, segmentation and encrypted links between branches.

Platform

Delivery & ops

  • Docker, nginx
  • Git, self-hosted Git
  • Cloudflare — DNS, tunnels, WAF
  • Linux — Debian and Ubuntu

How it gets deployed, published and kept reachable without exposing the origin.

Credentials

Certified across four disciplines

Formal certification in the platforms we actually deploy — so the design decisions on your network were learned somewhere other than your network.

Routing & switchingCisco

Enterprise routing, switching and campus network design — the backbone standard most business networks are measured against.

RouterOSMikroTik

Routing, firewalling, VPN and traffic management on RouterOS, the platform behind most of the multi-site work we run.

InfrastructureCompTIA

Vendor-neutral networking and systems fundamentals — the part that stays true no matter whose box is in the rack.

Tier 3Cybersecurity

Hardening, segmentation, monitoring, incident handling and response — applied to every network we design rather than added afterwards.

What that adds up to

A vendor who can be
held to it

SOFTWARE

Eight systems in production

HRIS with a native mobile app, parking and access control, Philippine-compliant accounting, a 201 records vault, bot and system automation, and managed hosting — built for local operations, not translated into them.

See the products

INFRASTRUCTURE

Four networks in operation

Multi-site routing with failover, segmentation and secure remote access across distribution, logistics, property and hospitality — designed, documented, and still run by us.

See the network work

Philippines · remote and on-site

Talk to the people who
will do the work.

There is no account manager in between. The first reply comes from whoever will be responsible for the build.