Frequently Asked Questions

Spam filters look for viruses and bad links. Most email fraud carries neither - it is a plain message asking you to pay an invoice, change banking details or approve a payment. SIFT scores every message, sends anything suspicious to an AI reviewer that works out what the message is really asking for, and holds it with a plain-English reason. It works with Microsoft 365, Google Workspace, cPanel hosting and any standard mailbox.

A risk assessment of your current posture, a prioritised roadmap aligned to NIST and CIS, then hands-on remediation with your team. No boilerplate reports - everything is mapped to your environment and threat model.

Yes. Our assessments map technical and operational controls to POPIA obligations so you can demonstrate lawful processing, reasonable security safeguards, and incident readiness to the Information Regulator.

By attack surface and risk: web applications and APIs, external and internal network, cloud, and social engineering. You receive an executive report with risk-rated findings plus technical remediation guidance developers can action.

Yes. 82% of ransomware targets companies under 1,000 staff. We size engagements so SMBs get practical defence without enterprise overhead - you pay for risk reduction, not hours.

Discovery call within one business day. Engagements typically kick off within one to two weeks once scope is agreed and a Rules of Engagement document is signed.

Not if we plan it right. We agree testing windows, carve out safe zones, and can run destructive checks against staging. Our goal is evidence without outages.

We walk your team through findings, prioritise by risk, and verify fixes. Most clients move to a retainer so we monitor posture and re-test as their stack changes.