About
Johan founded CyberFrame to help small and mid-sized businesses defend against the way they actually get defrauded: through email, and through security defaults nobody ever revisited.
He has worked in information security since 2017. He spent four years as an information security consultant at F-Secure, working on penetration testing and security assessment. In 2021 he joined USP&E Global, where he has led global IT since, as Head of IT from 2023, and still holds that role alongside CyberFrame. Running an organisation's IT day to day is the other side of the work CyberFrame does: the advice comes from someone who has to live with it.
CyberFrame does penetration testing, runs SIFT, an inbound email screen that judges what a message is asking for, and published the 2026 South African Email Security Census, which found that 84.3% of 58,769 verified business domains can be spoofed.
Focus
- Offensive testing. Web, API, network and cloud penetration tests for small and mid-sized businesses, reported so developers can fix what is found.
- Email fraud and authentication. Business email compromise, invoice fraud, SPF, DKIM and DMARC: the routes by which South African businesses most often lose money.
- POPIA and security strategy. Turning section 19's "reasonable security measures" into a short list of controls a business can actually put in place.
Research and writing
- South African Email Security Census 2026 (September 2026). SPF, DKIM and DMARC records of 58,769 verified business domains, with method, results by mail host and limitations.
- We checked 58,769 South African business domains. 84% can be spoofed. (September 2026). What the census means for a business and the questions to ask an IT provider.
- POPIA and "reasonable security measures" (April 2026). What the Information Regulator's enforcement notices reveal about the controls it expects.
- The ransomware playbook South African SMBs keep losing to (March 2026). The four-step chain and the three controls that break it.
Contact
For engagements, press or questions about the research: info@cyberframe.co.za, the contact form, or LinkedIn. Figures from the census may be quoted with attribution.