A representative record of delivered work. Client identities are anonymised on this public site; references and detailed case studies are available under NDA on request.
Government • StateA Nigerian state government and its innovation, science & technology ministry asked us to think long term. We delivered a multi-year security architecture roadmap, wrote the zero-trust whitepaper and migration blueprint, designed the data centre, and ran confirmation testing on the primary and DR pair that carries the state-wide network.
Government • StateWe audit the disaster-recovery perimeter firewalls on a rolling basis: rule-base reviews, configuration assessments, and a risk-ranked remediation list the client's team can actually work through. We also ran a structured, criteria-based evaluation of endpoint-security vendors, giving state procurement a defensible shortlist.
Financial Services • FinTechA financial services group brought us in for a central-bank PSSP examination: we prepared the evidence and handled the technical responses. The work grew from there into a group-wide risk remediation plan, an internet-facing asset inventory with attack-surface discovery, and technical audit responses for communications-sector regulators.
Financial Services • FinTechWe hardened the client's SIEM/FIM monitoring stack against CIS benchmarks and proved the result with a verified re-scan. Alongside it runs a standing dark-web monitoring programme: leaked credentials and brand exposure, briefed to executives on a fixed schedule.
Government • StateA data-centre core-switch outage took down a state's disaster-recovery site. We supported the restoration, validated failover, and closed the incident out with a formal post-incident advisory to executive stakeholders.
EnterpriseWe designed and built the site-to-site IPsec VPN linking the client's primary and DR environments, then delivered custom SIEM/FIM dashboards so the operations team sees its security posture live — priorities, not noise.
EnterprisePosture checks on Active Directory and LDAP across the client's domain infrastructure, plus targeted research into emerging critical CVEs — detection scripts and exposure reporting, including work on the recent critical PHP vulnerabilities.
Detailed, attributable case studies can be shared under NDA where client confidentiality terms permit.
Tell us what you are protecting and we will show you how we would approach it.