Security your customers, partners and regulators can rely on.

We find the gaps before attackers do, fix what matters first, and put the controls in place that keep you audit-ready as you grow.

Who it's for

Healthcare, finance, legal and other organisations that hold sensitive data or answer to regulators.

Book a discovery callSee the results
An example assessment summary of the kind we deliver. Names and figures shown are illustrative.

What changes

Know your risks. Fix the right ones first.

A clear picture of your risk

An assessment of your systems, devices and habits, ranked by how likely and how costly each gap is, written for the people who decide.

The basics done properly

Multi-factor sign-in, encrypted data, tested backups and the right access for each role, the controls that stop most real attacks.

Ready when the auditor calls

Policies, records and evidence kept up to date, so a client questionnaire or a regulator’s visit is a routine week, not a scramble.

Results

Threat monitoring
24/7
Threat monitoring
Risk reduction
60%
Risk reduction
Frameworks
GDPR & SOC 2
Frameworks

How we work

Assess, fix, prove, monitor.

Every stage ends with a written result you can act on, so you always know your risk and what it will take to reduce it.

  1. 011 week

    Scoping

    We agree what is in scope, what data you hold and which rules apply to you.

    • Scope and rules of engagement
    • Fixed quote
  2. 021–3 weeks

    Assessment

    We review systems, settings and policies, and test them the way an attacker would.

    • Findings ranked by risk
    • Plain-language summary
  3. 03Prioritised sprints

    Fix

    We fix the most serious gaps first, with your team or for them.

    • Fixes, highest risk first
    • Re-test of every fix
  4. 042–6 weeks

    Comply

    Policies, records and staff training that match the rules you answer to.

    • Policies and records
    • Staff awareness training
  5. 05Ongoing

    Monitor

    Round-the-clock monitoring, regular re-tests and help when something goes wrong.

    • 24/7 monitoring
    • Quarterly re-test

Ways to work with us

Pick the model that suits the work.

Security assessment

A one-off review of your systems and practices, with a ranked list of what to fix.

  • Assessment and testing
  • Written report and debrief

From $1,500

Fix and comply programme

We close the gaps and prepare you for the rules and audits you face.

  • Prioritised fixes
  • Policies and evidence
  • Staff training

From $4,000

Managed security

Ongoing monitoring and support for organisations without a security team, billed monthly.

  • 24/7 monitoring
  • Quarterly re-tests
  • Incident support

From $500 / month

What you can count on

Confidential by default
Findings are shared only with the people you name, and we sign an NDA before we start.
Careful testing
We agree what we test and when, so your systems and customers are never disrupted.
Plain-language reporting
Every finding says what it means for the business and what to do, not just a technical score.
Re-tested, not assumed
Every fix is tested again before we mark it closed.

Tools we work with

  • Cloudflare
  • Auth0
  • Okta
  • CrowdStrike
  • Fortinet

We strengthen the tools you already have before recommending new ones.

Who you’ll work with

  • Security leadYour single point of contactScopes the work, leads the assessment and explains every finding to your leadership in plain language.
  • Security engineerTesting and fixesTests your systems the way an attacker would, then fixes and re-tests what we find.

Questions we get asked

We think we’ve been hacked. What should we do?

Call us now on +250 788 538 401, or use the Under attack? button at the top of this page. Disconnect affected computers from the network but leave them switched on, and don’t pay or reply to the attackers.

How much does it cost?

Security assessments start from $1,500, priced on scope and agreed in the first week. Fix and comply programmes start from $4,000, and managed security from $500 a month.

Will testing disrupt our systems?

No. We agree what we test and when before we start, avoid busy hours for anything sensitive, and stop at once if something looks at risk.

Which regulations can you help with?

Rwanda’s data protection law (Law No. 058/2021), GDPR and SOC 2, as well as the security questionnaires that banks, larger clients and partners send their suppliers.

We’re a small team. Is this for us?

Yes. Smaller organisations are targeted most because the basics are often missing. We size the work to your risk, starting with the fixes that matter most.

Who sees our findings?

Only the people you name. Reports are shared through access-controlled channels, and we sign an NDA before any work begins.