01
Assess & scope
Assets, frameworks, escalation contacts, success metrics.
SOC · ENGINEERING · AI
>>> Stay secure, stay Savvy
Managed detection · Secure builds · Agent workflows
02
Instrument & build
Sensors and product surfaces with agreed baselines.
03
Operate & respond
Monitoring, investigation, launch with observability.
04
Improve & validate
Detection tuning, purple team retests, roadmap cadence.
Security coverage across regions where your people, cloud, and customers already run.
Regions of operation
15
Countries with active security work
What we cover
- Managed SOC and incident response
- Endpoint, identity, and cloud telemetry
- Secure product and platform delivery
- 01
Saplayer
Saplayer is a trading card app built for people who treat collecting like investing, and for sellers who need more than a spreadsheet. Add singles, graded slabs, and sealed product across Pokémon, Magic, One Piece, Yu-Gi-Oh!, Lorcana, and the rest of the TCG shelf. One portfolio, live value, and a marketplace when you are ready to move cards.
- 02
Wonderport
Wonderport Collectibles is the South African home for designer toys and blind boxes: POP MART, 52TOYS, Labubu, Hirono, Skullpanda, and dozens of other brands collectors chase. They hold the patent licensing and distribution rights that bring those products to local fans.
- 03
Xevo
Xevo is a padel app built for people who want honest feedback on their game without waiting for the next lesson. You record a match or practice clip on your phone, upload it, and get a breakdown of what you did well and what to fix next time.
- 01
LFI to FTP write, cron pivots, and adm backup SSH key
Intermediate32 minLocal file inclusion exposed credentials that unlocked FTP write. From there: cron and Python import pivots, then an adm-group backup key to root. Classic Linux privilege chain with nested footholds.
Linux · LFI · FTP · Privilege Escalation
- 01Recon and LFI
- 02FTP upload → RCE
- 03Sudo / cron / Python
- 04adm backup key → root
- 02
PHP path injection, container SUID escape, and internal SSH pivot
Intermediate30 minPath-parameter RCE landed a shell inside a container. SUID escape to root in-container, then SSH lateral movement to an internal host where MySQL credentials finished the chain.
Linux · Container · Web · Lateral Movement
- 01Path-parameter RCE
- 02Container SUID escape
- 03Internal SSH pivot
- 04MySQL → host root
- 03
Rabbit-hole web enum, Python import hijack, and perl capabilities
Intermediate30 minRecursive path enum recovered SSH credentials. Sudo Python import hijack, SUID PATH abuse, and perl cap_setuid closed three privilege boundaries on the way to root.
Linux · Web · Sudo · Capabilities
- 01Rabbit-hole enum → SSH
- 02Python import hijack
- 03SUID PATH hijack
- 04perl capabilities → root
Managed SOC, Trust Center, or product work from a team that operates both.