Proof, not promises
Real engagements with measurable outcomes. Client identities are anonymised to protect security posture. The results, frameworks and methods are exactly as delivered.
Selected outcomes
A JSE-listed financial services provider cut critical exposure by 71%
After a merger left a fragmented estate, a continuous vulnerability-management programme plus quarterly assurance took the group to a defensible, board-reported posture in three quarters.
A national hospital group reached 100% POPIA breach-readiness
Fragmented incident processes and unmanaged clinical devices left patient data exposed and reporting duties unclear.
A metro cleared its Auditor-General IT findings
Recurring AGSA findings on IT controls and governance threatened a clean audit outcome two years running.
An omnichannel retailer passed PCI DSS 4.0 first time
A looming PCI DSS 4.0 deadline across POS and e-commerce, with no clear view of scope or gaps.
A law firm stopped a wave of business email compromise
Repeated invoice-fraud attempts and phishing put privileged client funds and confidentiality at risk.
A mining house secured operational technology across 7 sites
Remote OT/SCADA networks with flat architecture and unmonitored access created safety and availability risk.
A digital bank achieved SOC 2 Type II readiness in six months
A fast-scaling fintech needed SOC 2 assurance to win enterprise clients, with controls still maturing.
Your outcome could be the next one here
Every engagement starts with an honest baseline. Let’s find out where you stand, and what “better” looks like for you.