External Security Posture · Johannesburg · London
Know what attackers see before they do.
We continuously assess your public-facing surface, then turn exposure into a prioritised plan your team can actually action. Nothing intrusive. No noise. Just the risks that matter, tracked to closed.
The Fourths also engineers the platforms, AI systems, and compliance software that regulated businesses run on. Security is simply where we now lead.
001 · What You Get
Exposure, prioritised and closed.
Exposure discovered
We map what is reachable from the outside across your domains, email, and web services, including the assets you have forgotten you own.
Risk prioritised
You get a short, ranked list of what actually exposes you, in business terms, not a raw dump of findings.
Remediation tracked
Every issue is followed through to closed, and stays closed, with the record to prove it.
002 · Coverage
What we assess.
We treat your external surface the way an attacker would: patiently, from the outside, looking for the one thing you missed. Then we help you close it before they find it.
Selected Work
Platforms in production.
Platform Engineering · POPIA
Regulated SA Fintech Platform
Production-grade multi-tenant platform for a South African fintech, with POPIA requirements designed in from the schema up. Built, deployed, and owned end to end.
Compliance · MCOB
Mortgage Technology Built to MCOB Requirements
Mortgage technology for an FCA-regulated UK lender, built to support its Consumer Duty obligations, audit trails on affordability assessments, ESIS generation, and customer communications.
003 · Beyond Security
We also build the things worth protecting.
Platforms, AI systems, and the software regulated businesses run on remain core to what we do. The difference is that everything we ship is built to be defensible from day one, not audited into safety later.
Platform Engineering
Production-grade SaaS and internal platforms. Architecture, build, and ongoing ownership from database schema to deployment pipeline.
Explore 02AI Integration
AI that fits into your existing stack. Document processing, RAG pipelines, and workflow automation, designed around POPIA and FCA obligations from the start.
Explore 03Technical Strategy
The CTO perspective without the full-time salary. Architecture decisions, vendor evaluation, and technical due diligence on a retainer your finance team can approve.
Explore 04Compliance Systems
Software built to stand up to audit, with the evidence ready before the auditors arrive. POPIA, FCA, MCOB, and FSCA requirements built into the architecture, not bolted on after.
Explore 05Performance Tracking
Dashboards, analytics pipelines, and reporting systems that give leadership real numbers, not summaries of summaries built on stale exports.
Explore 06AI Agent Systems
Purpose-built AI agents for operations, document handling, internal routing, customer triage. Production-grade systems, not proof-of-concept demos.
Explore 07Web Design & Campaigns
Agency-grade web design for companies that cannot afford generic. Marketing sites, campaign pages, and digital presence built to convert.
Explore 08Managed Microsoft 365
We own your Microsoft environment and run it to an audit-ready standard, hardened, monitored, and evidenced, every month.
Explore 09Immersive Classrooms
Safe, curated virtual reality for schools, fully managed. Headsets, curriculum-aligned content, and coding & robotics, with no IT burden on the school.
Explore 10Retainer Partnership
A dedicated engineering team, billed monthly. No project-end exits. No knowledge transfer taxes. Your platform, continuously owned by the team that built it.
ExploreWho We Work With
Built for businesses under real scrutiny.
Regulated fintech & lending
South African and UK financial services firms where POPIA, FSCA, FCA, and MCOB obligations are not optional, and where a failed audit is an existential event.
Operations-heavy businesses
Companies drowning in document handling, routing, and manual triage who need production AI and platforms that hold up at operational scale, with full audit trails.
Founders scaling past the prototype
Teams who built something that works but now need it to survive production, architecture, compliance, and ownership from a team that stays for the long run.
Trusted by teams we build for
From the Blog
What we're writing about.
AI for Operations
Moving AI agents from proof-of-concept to production.
The gap between a demo that impresses and a system that runs 50,000 times a month without supervision is not a matter of scale. It's a matter of design.
Platform Engineering
Why we build regulated platforms on Azure, not AWS.
Tenancy, identity, and compliance posture decide the stack long before performance does. For regulated workloads, that answer is rarely AWS.
Compliance Engineering
Consumer Duty at the code level: what it actually requires.
Consumer Duty is usually read as a policy document. Most of it is, in fact, a set of engineering requirements waiting to be written down.
See your exposure before someone else does.
A first assessment tells you where you actually stand. Most teams are surprised.