Find it first.Stop it at the edge.
We find the weaknesses before attackers do and stop the attacks that come anyway, for organisations and for individuals.
01 · Two paths
Two paths
For organisations
- Defence against AI-driven attacks
- Counter cyber-espionage and cyber-terrorism
- Digital forensics
- Penetration testing: web, mobile, API and cloud
- Secure code review and cloud security review
- Incident response and breach recovery
- POPIA and ISO 27001 readiness
- Part-time CISO
For individuals
- A personal security check of your phone and accounts
- Protection against SIM-swap and WhatsApp takeover
- Password manager and two-factor setup
- Home Wi-Fi and router check
- Help recovering your accounts after a hack
02 · Lead service
Defence against AI-driven attacks
AI agents let one attacker do the work of a team. We meet them with defences that watch behaviour, not just addresses.
Theiragents.
What we put in front of your systems
- Behaviour-based detection of automated and agent traffic
- Edge firewall rules and rate limits tuned to your real traffic
- Decoys that catch automated probing early
- Blocking bad sources, and stopping new ones the same way
Everyfix.
What we do once we find it
- A remediation roadmap mapped to how APT groups operate, highest risk first
- Every fix carried out in your code, cloud and network
- Retesting until each finding is closed
- Evidence for your board, auditors and regulators
03 · Services
Services
Penetration testing
We attack your web, mobile, API and cloud surfaces the way a real adversary would, then show you how to close each path.
Secure code review
Line-by-line review of the code that matters most: auth, payments, data access.
Cloud security review
Identity, network, secrets and logging across your cloud accounts, checked against how attacks actually start.
Incident response
When something has gone wrong, we contain it, find how it happened and help you recover.
Counter cyber-espionage and cyber-terrorism
We hunt advanced persistent threats (APTs), the targeted, long-running intrusions behind espionage and attacks on critical systems, remove them and protect what they were after.
Digital forensics
We collect and examine digital evidence with a documented chain of custody, so you know exactly what happened and can act on it.
POPIA and ISO 27001 readiness
We get your controls, records and evidence ready for the regulator and the auditor.
Part-time CISO
Senior security leadership without the full-time hire: strategy, board reporting, vendor reviews.
04 · Thetaline
Built on Thetaline.
Thetaline is the security platform we designed and own. Every engagement runs on it, from the first scan to the last verified fix.
- 01
Vulnerability assessments
Find and rank the weaknesses across your applications, cloud and network.
- 02
Penetration testing
White-box and black-box tests, planned, run and recorded in one place.
- 03
Remediation
Every finding followed through to a fix, then retested and closed.
- 04
Build image scanning
Software build images scanned for vulnerabilities before they ship.
- 05
Dependency scanning
Every library your code pulls in, checked for known vulnerabilities.
- 06
Package scanning
Third-party packages checked before they reach your systems.
ResearchWe're currently researching elliptic-curve cryptography.
05 · How an assessment works
How an assessment works.
Scope
We agree what's in, what's out and what success looks like.
Test
We test the agreed systems the way an attacker would.
Remediate
We carry out the fixes ourselves, highest risk first, and document every change.
Retest
We test again, so the work ends with evidence, not promises.
Built on established frameworks
- Organisational securityNIST Cybersecurity Framework 2.0
- Information securityISO/IEC 27001
- National policySouth Africa's National Cybersecurity Policy Framework
Responsible disclosure
Found a weakness in one of our systems? Tell us. Researchers acting in good faith won't face legal action.
Responsible disclosurePrevention is better than cure.
Request a security assessment06 · Contact
06 · Contact
Start with a conversation.
Tell us what you're building or what worries you. We reply within one business day.
Please don't send passwords, keys or incident evidence over WhatsApp. We'll set up a secure channel.