M/agnetM/agnet
Eastbourne · UK
/ Platforms / Guest Hotspot

Everyone's online. Guest Wi-Fi that behaves itself.

M/agnet is the public Wi-Fi layer we built for the venues we support — and the software we now ship to other operators who need the same thing done properly. A UniFi-first captive portal with auditable consent, returning-guest recognition and a voucher engine for events and access codes — branded per venue, operated per organisation, and built to extend without rewriting.

01/ The problem

Guest Wi-Fi is the data capture nobody's capturing properly.

Most venues have one of two setups: a captive portal that asks too much and loses the guest, or one that asks nothing and learns nothing. And then the events come along, and whatever's on the wall isn't designed for the night.

  1. Captive portals are either a wall or a free-for-all.

    Either the guest hits a form wall that scares legitimate visitors off, or they click through anonymously and you learn nothing about anyone. Most venues have picked one and lived with the downside.

  2. Consent lives in a session, not a person.

    Ticked boxes end up stamped on a session record that's gone by morning. When somebody asks what they agreed to, when, and at which venue, the trail doesn't exist.

  3. Events get the worst of it.

    Weddings, conferences and pop-ups end up on whatever portal the venue uses day-to-day, with no branding, no per-event attribution and no clean way to give guests access without an email signup at the front door.

02/ The shape

Four verbs. One portal.

Welcome, capture, consent, connect. The portal is short, the data model is proper, and the integration to the network underneath it isn't guessed. Consent is an event trail against the person, not a tick on a session. Returning guests reconnect without being re-asked to subscribe. Events get their own branding and their own attribution.

Designed for the constrained browsers captive portals actually run in — captive network assistants, mini-browsers, phones on weak signal — not the developer's desktop Chrome.

03/ What it does

Every piece a guest Wi-Fi platform should have, without the ones it shouldn't.

Nine capabilities, each one delivered, none of them bolted on. No social-login obstacle course, no drag-and-drop page builder nobody wanted.

Module

Branded portal templates

A small set of polished, mobile-first templates with logo, colours, copy and imagery configured per organisation or per venue. Configurable capture fields per venue. UniFi authorisation across all four controller modes — credentials, API key, cloud, and Site Manager Proxy — with sub-100ms auth on the cloud path.
Module

Events with branded portals

Events are a first-class object. Per-event branding cascade, scoped to the access points in play and a timed window — so the portal looks like the event on the night and back to the venue the morning after. Real attendance counts with marketing-consent breakdown, exportable.
Module

Voucher system

Batch generation wizard, human-readable codes, A4 12-up printed slips with per-slip QR codes, portal redemption flow with email binding, device cap enforcement, single-use, expiry and void. CSV export. The same redemption pipeline will carry paid Wi-Fi and sponsor codes later.
Module

Email sign-up & click-through access

Low-friction capture with soft validation, format normalisation and disposable-domain detection. No inbox-check wall — guests are online in one tap. Optional click-through fallback for venues that prefer minimal capture; terms still accepted, visit still recorded.
Module

Returning-guest recognition

Best-effort recognition via UniFi client identifiers, device MAC and a signed cookie fallback — so returning visitors reconnect in a tap and don't get re-asked to subscribe.
Module

Consent as an audit trail

Terms acceptance, marketing opt-in, source, venue and wording version stored as structured events against the person — not a boolean on a session. Guest data export and admin-initiated deletion. Automated retention sweep with a configurable flag-then-hard-delete window. Full data map.
Module

Audit log

Every administrative action recorded with actor, timestamp and structured payload — viewable and exportable from the admin panel. Answers the "who did what, when" question without an open-ended dig through logs.
Module

Platform email infrastructure

Transactional email via Resend or Microsoft 365, selectable per environment. AES-256-GCM encrypted credential storage. Per-organisation routing with cascade fallback — if a tenant has configured their own provider, that's used; otherwise the platform provider handles it.
Module

Multi-tenant admin with venue scoping

Three-tier role model — platform admin, organisation admin, venue admin — with a view-scope switcher for users with multi-venue access. Microsoft Entra SSO for the platform team, local credentials for customer admins, on one user model rather than two parallel systems.
04/ Events & vouchers

One substrate. Different doors.

The voucher engine isn't a feature — it's a redemption pipeline. Today it underpins event codes and sponsor giveaways. Tomorrow it carries paid Wi-Fi without rewriting the network bit. Same authorisation rail, different ways of issuing a code.

Door

Events, today.

Mint a batch of codes a week before the wedding. Print them on table cards. Guests redeem on the night without filling out a form — and the venue knows the next morning that thirty-eight devices used the network.
Door

Sponsor & promo codes, today.

Same engine, different shape. A code printed on a flyer, handed out at a stand, or pushed to a sponsor's mailing list — redeemed at the portal, attributed in the log, time-bounded and capped per device.
Door

Paid Wi-Fi, tomorrow.

Stripe Connect drops into the same redemption pipeline. A guest pays at the portal, the UniFi authorise call fires, the session is bound. No new architecture — just a different way of issuing the code.
05/ Our philosophy

The integration is the product.

The reason most guest Wi-Fi platforms feel wobbly is that they try to be everything — network vendor, campaign engine, loyalty platform, survey tool. M/agnet does one layer, properly, and integrates cleanly with the layers that own the rest.

  1. UniFi-first, not vendor-agnostic-for-its-own-sake.

    One controller ecosystem, done well, beats five done thinly. UniFi today, other vendors when there's a real customer reason — not a theoretical one.

  2. Vouchers are an asset, not a feature.

    The redemption pipeline is the substrate. Event codes today, sponsor giveaways and Stripe-based paid Wi-Fi tomorrow — all the same engine. We built the layer once so the use cases on top can come cheaply.

  3. Two kinds of admin, one model.

    Platform administrators authenticate via Microsoft Entra SSO; customer administrators use local email-and-password with a proper reset flow. One admin user model, multiple auth identities — not two parallel systems bolted together.

  4. Designed to extend, shipped lean.

    The data model leaves room for campaigns, native sending, advanced auth and surveys. The MVP doesn't build any of them. Extension points live in the schema, not in shipped code nobody's using yet.

06/ Who it's for

Anywhere guest Wi-Fi is a front door.

The common thread is simple: the venue wants a professional branded experience, a real consented marketing list and no deep technical expertise required to keep it running.

  1. Restaurants & cafés.

    Capture diner emails for marketing and seasonal promotions without making them check their inbox before they can order a coffee.

  2. Hotels & B&Bs.

    Guest Wi-Fi as a branding and post-stay touchpoint. Returning-guest recognition does the work nobody on reception has time for.

  3. Flex-space & coworking.

    Branded access for day visitors, hot-desk users and meeting-room guests — with a marketing list of prospective members building in the background.

  4. Retail & leisure.

    In-store Wi-Fi as a footfall data source and marketing opt-in channel, without a social-login obstacle course.

  5. Events & conferences.

    Printed voucher batches, per-event branding cascade and attribution back to the event in the audit log. Spun up per event, torn down just as cleanly.

  6. Gyms, salons & wellness.

    Branded Wi-Fi in member-facing spaces — a clean opt-in channel for class updates, offers and retention campaigns without cluttering reception.

/ Where we are

Shipped, in progress, next.

M/agnet is in active development. Below is the honest picture of what's in the platform today, what's being added right now, and what's queued next.

/ Recently shipped
  • Branded captive portal with per-venue theming
  • All four UniFi auth modes, sub-100ms cloud path
  • GDPR machinery — export, deletion, retention sweep
  • Admin audit log, exportable
  • Platform email — Resend + Microsoft 365 adapters
  • Events with branded portals
  • Voucher system — print, redeem, manage
/ In progress
  • Canonical upgrade page for redemption
  • Tiered access packages per batch
  • Full code list with search, filter and per-batch CSV
/ What's next
  • Production hardening — backups, monitoring, deploy pipeline
  • Mailchimp sync with unsubscribe flow-back
  • Microsoft 365 OAuth per venue, sponsored guest access
  • Paid Wi-Fi via Stripe Connect
/ Sister platforms

The other two M-Tech operational platforms.

/ Start a conversation

Let's put M/agnet behind your network.

Tell us the venues, the controller estate and what you're trying to do with the list once you've got it. We'd rather have an honest conversation about fit than send you a deck.