Cybersecurity consultancy · Harare

Penetration testing and compliance, from a team you can name.

We test systems, write down what failed, and stay until the important fixes are retested. The work covers ISO 27001, NIST, PCI DSS, GDPR and Zimbabwe's CDPA. Tatenda Mujati leads it.

Book a security assessment → Explore our services

0Engagements led

0Faster remediation

0Industries protected

retesting included ISO · PCI · CDPA based in Harare

OWASPPTESNISTOSSTMMISSAFSANSPCI DSSISO 27001GDPRCDPACISSPOSCPCISACRISCC|PENTCHFIOWASPPTESNISTOSSTMMISSAFSANSPCI DSSISO 27001GDPRCDPACISSPOSCPCISACRISCC|PENTCHFI

Core services

What we do

Testing, compliance, a part-time CISO, training, data protection and IT audit. Hire one, or run them together so the findings and the policies match.

Vulnerability Assessment & Penetration Testing

Network, web, cloud, mobile, IoT and social engineering — we find what attackers would, first.

Regulatory Compliance Support

Gap assessments and PIAs for ISO 27001, NIST, PCI DSS, GDPR and Zimbabwe's CDPA.

Virtual CISO (vCISO)

Security leadership when you do not need a full-time CISO: strategy, governance and someone to answer to the board.

Cybersecurity & Risk Assessments

Where the exposure actually is, and what is worth spending on first.

Training & Awareness

Workshops for the people who click links, write code and approve spend.

DPO as a Service

A data protection officer for Zimbabwe's CDPA: registration, policy, monitoring and reporting.

See all nine services →

Live engagement

The test includes the retest.

Each finding gets an owner. We come back and check the ones that matter. Testing is white box, black box or gray box, using OWASP, PTES, NIST and OSSTMM.