cestrix group

BACKGROUND

Please describe your company and position.

I am the IT Consultants of FSMPC

Describe what your company does in a single sentence.

FSMPC manages employes appraisal, tracking company metrix, and generates quarterly executive scorecard.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire cestrix group to accomplish?

• Develop a full-stack, secure STIP Portal (Next.js/Node.js) to manage employee appraisals and generate quarterly executive scorecards.
• Configure and deploy the application on a Windows Server 2022 environment using an IIS reverse proxy for public web access.
• Implement a centralized database architecture using MongoDB to securely track and store company-wide performance metrics.

SOLUTION

How did you find cestrix group?

Referral

Why did you select cestrix group over others?

• High ratings
• Pricing fit our budget
• Good value for cost

How many teammates from cestrix group were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Cestrix Group developed and deployed the STIP Portal, a secure, full-stack web application designed to manage employee appraisals, track company metrics, and generate executive scorecards. The scope of work encompassed the entire software lifecycle, from backend database architecture to final production server deployment.

Key Deliverables

Full-Stack Application Development: Engineered a custom, responsive frontend using Next.js (React) integrated with a robust backend API built on Node.js (Express).

Database Architecture: Designed and implemented a centralized, local MongoDB database structure to securely store user credentials, system configurations, and quarterly performance data.

Server Setup & Deployment: Deployed the application on a Windows Server 2022 VPS, utilizing PM2 for automated process management and continuous application uptime.

Network Routing & Security: Configured Internet Information Services (IIS) as a reverse proxy to securely route public HTTPS traffic to internal application ports, alongside resolving complex CORS restrictions for external network access.

SSL Implementation: Configured auto-renewing Let's Encrypt SSL certificates using the win-acme client to ensure encrypted, globally accessible internet access.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

1. Successful Production Deployment: Transitioned the application from a development environment to a live, globally accessible production server on Windows Server 2022, utilizing PM2 to ensure continuous uptime.
2. Enhanced System Security: Secured internet-facing traffic by successfully configuring an IIS reverse proxy, resolving complex CORS vulnerabilities, and implementing automated SSL certificates.
3. Centralized Data Management: Successfully established a local MongoDB architecture, centralizing fragmented employee appraisals, company metrics, and executive scorecards into a single, cohesive digital platform.
4. Improved Accessibility: Established seamless, secure access for remote employees via the custom public domain, removing the strict requirement for cumbersome VPN access while maintaining corporate security standards.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Cestrix Group demonstrated exceptional project management and technical agility throughout the engagement. They consistently met project milestones on time and maintained clear, proactive communication across all phases of development.

What stood out most was their responsiveness to complex, unexpected deployment challenges. When we encountered strict corporate IT requirements, Web Application Firewall (WAF) negotiations, and intricate IIS reverse proxy configurations on our Windows Server environment, they didn't just wait for instructions—they actively drove the solutions. They swiftly diagnosed and resolved tricky CORS blocks and Next.js build-time variables, providing precise, step-by-step fixes that kept the launch on track. They acted as a true strategic partner, seamlessly bridging the gap between their development work and our internal IT infrastructure team to ensure a smooth, secure delivery.

What was your primary form of communication with cestrix group?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What truly sets Cestrix Group apart is their rare ability to blend full-stack software development with deep enterprise DevOps expertise. Many agencies can write code, but Cestrix seamlessly bridged the gap between their Next.js/Node.js application and our strict corporate IT infrastructure.

1. Infrastructure Mastery: When faced with complex deployment hurdles on our Windows Server 2022 environment, they expertly navigated Web Application Firewall (WAF) requirements and configured intricate IIS reverse proxy routing to ensure secure public access.
2. Proactive Problem Solving: Rather than waiting for our internal IT team to figure out server-level CORS policies or Next.js build-time variables, they actively diagnosed the root causes and provided precise, step-by-step architectural fixes.
3. Strategic IT Partnership: They didn't just act as coders; they functioned as systems administrators and technical advocates, ensuring the application met rigorous corporate security standards without compromising the end-user experience.

Are there any areas for improvement or something cestrix group could have done differently?

While Cestrix Group ultimately delivered an exceptional product and resolved all technical hurdles, the initial transition from their development environment to our live production Windows Server could have been slightly smoother.

Early in the deployment phase, a few frontend environment variables were hardcoded to local paths, which caused temporary CORS errors when accessed externally. Additionally, facilitating a deeper alignment with our internal IT team regarding specific reverse proxy requirements (IIS versus Nginx) and Web Application Firewall (WAF) routing earlier in the project timeline might have accelerated the initial launch.

That being said, their speed, accountability, and expertise in troubleshooting and resolving these configuration issues once identified were highly commendable.