Test the awkward control
We do not skip a check because it is inconvenient or because the answer will be unpopular.
About us
A Harare practice for testing, audit and compliance.
Rootbridge tests systems, reviews controls and helps organisations meet security and data-protection rules. Tatenda Mujati leads the work. He came up through IT audit.
Our vision
Clients who can show an auditor what they fixed, and why that fix was the right one.
Our mission
Test the systems, write the findings so both an engineer and a director can use them, and stay until the serious ones are closed.
Core values
01 02 03 04
How the work is run
Say what failed
If a control does not work, the report says so. We do not soften it into a maturity score.
Keep the file closed
Client data and findings stay inside the engagement. They are not material for another pitch.
Name an owner
Every finding that matters has a person and a date, then a retest.
Lead consultant
Tatenda Mujati
Lead Cybersecurity Consultant · Offensive Security & Compliance
More than 120 IT security engagements, including at a major audit firm. On those programmes, remediation time came down by about 40%. BSc (Hons) Information Systems.
CPENTCISSPCISACRISCCCSPPMPPNPTCHFIOSCP
The report is not the end of the job. We agree who closes each finding, then we retest.How engagements are run
- Penetration testing & ethical hacking
- SOC 2 / ISO 27001 compliance architecture
- Cloud & application security
- Digital forensics & incident response
- Risk governance & technical audits