Loading page
Fix the security risks that matter first
Evidence-based review for websites, applications and architectures, scoped honestly and delivered with a practical remediation path.
Security engagements
Choose the right depth of review.
Start with public exposure, examine application controls, or address trust boundaries before implementation.
Website Security Health Check
Understand your public exposure and what to fix first.
From KES 10,000 per engagement
Application Security Review
Verified security requirements for a system you already depend on.
From KES 25,000 per engagement
Secure Architecture Review
A threat model and trust boundaries agreed before you build.
From KES 30,000 per engagement
A recognised evidence base.
Methods are selected to suit the asset and decision. Framework references support judgement; they do not replace it.
- OWASP ASVS 5.0
- Verifiable security requirements, review criteria and procurement language.
- OWASP Top 10:2025
- Risk awareness and client education, not a completeness claim.
- Threat modelling
- System decomposition, ranked threats, mitigations and validation.
- NIST CSF 2.0
- Governance vocabulary for organisational risk conversations.
Rules of engagement
Clear authorisation protects your organisation, your users and everyone involved in the assessment.
- No intrusive testing without written authorisation that identifies ownership, scope, techniques and timing.
- Never send passwords, API keys, private keys or production credentials through our forms.
- When the assurance need exceeds advisory scope, we recommend specialist penetration testing.