Routing & resilience
Multi-site routing with dual-WAN failover, so a single ISP outage does not stop a branch from trading.
Network engineering
The part nobody sees
until it stops
We design multi-site networks, secure them, and then stay on to run them. Four are in operation now, across property, distribution, hospitality and logistics.
04Networks operated
Dual-WANFailover as standard
EncryptedSite-to-site links
MonitoredWith verified backups
Capability
What we actually do on a network
Segmentation
Separate networks for management, servers, staff, guests and devices — with only the traffic that has a reason to cross allowed to.
Secure remote access
Encrypted tunnels between sites and for engineers, so support does not mean travel and does not mean opening the network to the internet.
Security baseline
Default credentials removed, unused services closed, management restricted to a network users cannot reach.
Backup & recovery
Device configurations and server data backed up on a schedule — and restored on a schedule, because that is the only way to know they work.
Monitoring & support
Alerting on the things that precede an outage — links, capacity, service health — with a documented change record.
In operation
Four networks, by sector
Named where the client agreed to it. What is never published — for any of them — is topology, addressing or equipment inventory. That is a gift to whoever is scanning them, and no portfolio is worth it.
Commercial property
& retail group
Multi-tenant estate network
A single estate carrying tenant, operations and management traffic. Each is segmented from the others, the core is redundant, and access between departments is granted by rule rather than by default.
Tenant traffic isolated from operations
Redundant core, no single point of failure
Department access controlled by policy
Hap Suy Hardware Co.
Trading & distribution · 4 branches
Four-branch wide-area network
Every branch runs two internet services with automatic failover, and all four are joined by encrypted site-to-site links carrying warehouse and ERP traffic to the central systems.
Branches trade through ISP outages
Central systems reachable from every site
Support delivered remotely, not by travel
Hotel group
Guest and back-office separation
Guest wireless is a genuinely separate network from property operations — front desk, back office and building systems are not reachable from a guest device, and the administrative path never crosses into guest space.
Guest network cannot reach operations
Building systems kept off the guest path
Remote administration without on-site visits
Lazada
E-commerce & logistics
Fulfilment site connectivity
A high-throughput fulfilment operation where an hour offline is counted in undelivered orders. Redundant paths for order traffic, with operational and office networks kept apart.
Redundant paths for order traffic
Operations separated from office network
Failure of one path is not an outage
Automation
Removing the tasks people forget
Every manual routine is a future incident report. These are the two kinds we replace.
Chat-driven workflows
Work that happens in the chat app your team already has open, instead of a dashboard nobody logs into.
- Meeting scheduling with calendar handling
- Daily operational reports pushed to the team
- Alerts routed to whoever is actually on duty
- Request and approval flows without email chains
Unattended infrastructure
The jobs that must run whether or not anyone remembers them — and must prove they ran.
- Scheduled backups with verified restores
- Replication between primary and standby
- Service health checks with escalation
- Configuration backup and change history
Credentials
Certified across four disciplines
Formal certification in the platforms we deploy — so the design decisions on your network were learned somewhere other than your network.
Routing & switchingCisco
Enterprise routing, switching and campus network design.
RouterOSMikroTik
Routing, firewalling, VPN and traffic management on RouterOS.
InfrastructureCompTIA
Vendor-neutral networking and systems fundamentals.
Defensive securityCybersecurity
Hardening, segmentation, monitoring and incident response.
Assessment before proposal
We will look at what you
have before quoting it.
Most networks do not need replacing. Knowing which parts do is the difference between a fix and a rebuild.