CASE FILES
How teams contained real incidents
Anonymized, illustrative case files drawn from the kind of engagements we run — ransomware, fraud, and intrusion response across banking, fintech, government, and healthcare. Every result is representative and tied to our published response commitments.
FILTER BY INDUSTRY
FEATURED CASE FILE
IR: SACCO ransomware contained in four hours
A Kenyan SACCO was hit by ransomware at 02:30 on a Tuesday. Our IR team was on-site by 06:00 and had contained the outbreak within four hours. This is the full case-study breakdown - initial vector, containment steps, recovery timeline, and lessons for the sector.
MORE CASE FILES
Representative engagements
Anonymized case files from real engagements — every result is tied to our published response commitments.
IR: SACCO ransomware contained in four hours
A Kenyan SACCO was hit by ransomware at 02:30 on a Tuesday. Our IR team was on-site by 06:00 and had contained the outbreak within four hours. This is the full case-study breakdown - initial vector, containment steps, recovery timeline, and lessons for the sector.
Fraud-detection pipeline: end-to-end architecture
We designed and built the data and model serving layer for transaction-level fraud monitoring at a regional digital lender. Architecture, feature engineering decisions, and the integration with M-PESA's Daraja API are detailed here.
County smart-infrastructure: 18 months in
A Kenyan county commissioned CCTV, public WiFi, a citizen portal, and a digital literacy programme. We delivered all four workstreams. What worked, what we'd do differently, and what the county's residents can now access.
EMR deployment and NHIF integration at a private hospital group
A three-hospital private group needed an EMR, direct NHIF claims integration, and PACS imaging connectivity - on a 60-day deadline. We shipped all three. Process, challenges, and outcome metrics.
Kenya DPA compliance for an international development organization
An international development organization operating in Kenya needed ODPC registration, a data register covering 12 country offices, and privacy notices in three languages. Scope, process, and final deliverables.
START HERE
Want a response like this on call?
Book a 30-minute security assessment. We review your posture against the threats specific to your sector and tell you what to close first — no obligation.