Security Blog.
Insights From Our Work.

Threat research, forensic analysis and practical security guidance — written by the practitioners doing the work, with the African threat landscape in mind.

All Articles

Research, Guides
& Threat Briefings

Threat research, forensic technique breakdowns and breach analysis from our team, with more published as our research continues.

Security Operations

Build a SOC or Buy MDR? An Honest Cost Comparison for African Enterprises

A 24/7 security operations centre needs at least eight analysts before anybody takes leave. Here is what that actually costs against managed detection, and the point where building your own starts to make sense.

August 18, 20269 min read

Executive on a conference call in a boardroom

AI Threats

Voice Cloning and CEO Fraud: Why Your Approval Process Is the Only Control That Still Works

Three seconds of audio is now enough to clone a voice convincingly. That breaks every finance process that treats a phone call as proof of identity.

June 24, 20267 min read

AI Security

Securing AI Agents: Tool Permissions Are the Blast Radius

An AI agent that gets manipulated can only do what its tools allow. That makes the permission list the single most important security decision in any agent deployment.

April 30, 20268 min read

Researcher examining AI system behaviour

AI Security

Prompt Injection Explained: The Vulnerability Class Your Scanner Cannot See

Prompt injection is not a bug in a particular product. It is a structural consequence of systems that cannot distinguish instructions from data — and it is already in production across the region.

February 17, 20268 min read

Identity Security

Credential Stuffing: Why Last Year’s Breach Becomes This Year’s Incident

Attackers rarely guess passwords any more. They replay credentials leaked from somewhere else, and password reuse does the rest of the work for them.

December 9, 20256 min read

Architects planning an access control redesign

Zero Trust

Zero Trust Without a Rebuild: A Practical Sequence for Existing Environments

Zero Trust is sold as an architecture you migrate to. It is better understood as a set of changes you can sequence against the environment you already have.

October 21, 20258 min read

Incident Response

Run the Tabletop Before the Incident: What Three Hours Reveals

Every incident response plan looks adequate until you walk a real scenario through it with the actual people. The gaps are never where the plan says they are.

August 12, 20257 min read