Nine services. Take the one you need, or keep them with the same team so the test results and the policies do not contradict each other.
We look for the issues an attacker would use, then list them in the order you should fix them.
Gap assessments and privacy reviews against ISO 27001, NIST, PCI DSS, GDPR and the CDPA.
A security lead on a retainer: strategy, policies, incidents and the conversation with the board.
A plain account of which risks are real, and which controls are only written down.
Workshops for executives, staff and developers, including phishing exercises.
Help during an incident, and a review before you roll out a new system.
Full compliance leadership for Zimbabwe's Cyber and Data Protection Regulations.
Independent assurance over the controls, systems and projects your business depends on.
We run the security project: scope, vendors, and a status the sponsor can follow.
Comprehensive analysis with full access to system architecture and source code.
Simulating real-world cyberattacks with minimal prior system knowledge.
Some access, not all of it. Useful when you know the weak system but not every detail.
Which one we use depends on how much access you can give us, and what you need the test to prove.
Tell us your environment and obligations — we will scope the right programme.
Talk to a consultant →