Everything between your users and their work.
Seven disciplines, one accountable team. Pick a single service or let us run the whole stack.
Networks & security
A network is the foundation everything else stands on. We design it for clarity, isolation and recovery — then document it so anyone can support it.
- Firewalls & routing — virtual or hardware (OPNsense, MikroTik), with VLAN segmentation for staff, guests, servers and IoT.
- DNS filtering and per-device schedules (AdGuard Home) — including kid-safe and guest policies.
- Site-to-site and remote-access VPN (WireGuard, Tailscale, ZeroTier) for people and branches.
- Managed switching, Wi-Fi and PoE design; structured-cabling reviews and link diagnostics.
- Forced-VPN egress and kill-switch rules for untrusted or high-risk traffic.
NetworksCloud & hybrid infrastructure
Put workloads where they make sense — on-premises for control, in the cloud for reach — and join them with a private, encrypted fabric.
- Proxmox virtualisation for VMs and containers, with backups and snapshots built in.
- Oracle Cloud Always-Free and pay-as-you-go fleets — provisioned, patched and automated with Ansible.
- Mesh networking that works behind carrier-grade NAT: no port-forwarding, no public management ports.
- Self-hosted relays and jump hosts as deliberate fallback paths.
- Private cloud storage (Nextcloud) to replace per-seat subscriptions.
Cloud & hybridBusiness email
Professional mail on your own domain — fast, private and trusted by the big providers.
- Mailbox hosting, webmail and calendars/contacts (Mailcow with SOGo), plus phone and Outlook auto-configuration.
- Deliverability engineering: SPF, DKIM, DMARC, MTA-STS, TLS-RPT and relay fall-backs.
- Spam and malware filtering (Rspamd), brute-force protection and TOTP-secured admin.
- Encrypted nightly backups with an off-site copy and restore tests.
- Google Workspace setup: domain verification, users and groups, shared drives, 2-step verification and migrations.
- Migrations from existing providers with minimal disruption.
EmailBackup & recovery
A backup you've never restored is a hope, not a plan. We build chains that survive mistakes, hardware failure and ransomware.
- Encrypted, deduplicated backups (restic) to append-only servers — attackers can add data, never delete history.
- The 3-2-1 rule in practice: multiple copies, different locations, one off-site.
- Per-system credentials and private repositories so one compromise can't reach everything.
- Automated freshness alarms and scheduled restore drills.
- Self-healing services so a reboot never silently stops your backups.
BackupMonitoring & support
We instrument everything, alert on what matters — and verify that the monitoring itself is telling the truth.
- Metrics, logs and dashboards (Prometheus, Loki, Grafana, Netdata) across servers, networks and power.
- Uptime checks and a public status page your customers can trust.
- UPS and power-event monitoring with graceful shutdown.
- Patch cadence, fleet-wide automation and scheduled health sweeps.
- Helpdesk and on-site support: Windows, Active Directory, Hyper-V, endpoints and peripherals.
MonitoringBusiness software
Off-the-shelf tools rarely match how a Kenyan SME really invoices, pays staff or files paperwork. We build small, sharp systems that do.
- Quotations, invoices, delivery notes, credit/debit notes and statements with client-specific PDF layouts.
- Payroll with Kenyan statutory deductions and an employee self-service portal (in pilot).
- Secure internal portals behind private networks — not exposed to the open internet.
- Nightly backups and tested restore paths for every data-holding app.
- Hardware & compliance integrations — e.g. diagnosing tax-register (ETR) connectivity.
SoftwareDomains & web presence
Your domain is your identity. We register it, secure it and point it at the right things — website, email and verification records included.
- Domain registration, transfers and renewals (Namecheap and other registrars), with registrar lock and expiry tracking.
- DNS done properly: website, email, Google Workspace and verification records — documented and DNSSEC-signed where supported.
- Fast, secure websites on global edge hosting, designed to your brand.
- Reserved sub-domains for portals and internal tools, kept private until they are ready.
Domains & webNot sure where to start?
Describe the problem in your own words. We'll tell you which of these actually matters first.