joelcedras.dev
Talks & consulting

Speaking and consulting

I give talks about my investigations, and I help organisations build and secure the systems they rely on. For either, just email me.

Testing, one two

Talks, panels & media

Talk 01

How a grant system for the poorest was quietly drained

What the SASSA SRD findings showed, how we found them without hacking anything, and what happened once they reached Parliament.

Talk 02

Government websites and apps, tested

Thousands of security flaws across government websites, a provincial panic app that left crime reports open, how we found them, and fixes that are neither expensive nor complicated.

Talk 03

Inside a scam syndicate

Money mules, pyramid schemes sold by influencers, and what a R511-million operation looks like from the inside, including the time we let ourselves get scammed on purpose.

Talk 04

Getting into security as a student

For universities and schools: how to turn curiosity into a security career, how to report what you find responsibly, and where the legal line is.

Formats
  • Conference keynote or session (20–45 min)
  • Panel and moderated Q&A
  • Campus, school and community talks
  • Podcast, radio and television interviews
  • Newsroom or team workshop on verification and OSINT
Practicalities
  • Based in Cape Town and happy to travel
  • Remote or pre-recorded is fine
  • Two weeks’ notice is ideal, but less is often possible
  • English or Afrikaans
Coverage so far
  • The SASSA findings made national news and reached Parliament
  • Mail & Guardian Top 200 Young South Africans, Editor’s Choice
  • Featured by MyBroadband and Stellenbosch University

On air

Radio, TV and podcast interviews about stories I reported.

The SASSA story was also covered by eNCA, PowerFM, IOL, Die Burger, You Magazine and the SABC.

Consulting

digifend.com

Since 2023, Digifend has run websites, servers and workspaces for small businesses, nonprofits and sole proprietors. The goal is simple: sites that stay up, email that arrives, and a security review before an attacker does one for you.

Websites, built and hosted

Design and build, domains and DNS, hosting, email and ongoing maintenance. I meet with your team and keep refining until it’s right.

Security reviews

I test your sites and servers for vulnerabilities and write up the fixes in plain language, most serious first. If you’ve already been breached, I can help with that too.

Cloud & workspace

Microsoft 365, Google Workspace and Azure: setup, migrations, permissions and security settings, and moving your team across without losing anything.

Internal software & systems

Small internal tools built to fit, like HR software, automations and reports, plus setting up third-party tools such as DocuSeal, Salesforce and SendGrid.

Workstations & support

Computers set up to suit how your team works, with the hardware, software and settings sorted before handover.

Graphics

Posters, presentations, billboards, social media posts and website banners, for organisations without a designer.

Want to book a talk or get help?

Tell me what it is, when it is and who the audience is. For consulting, a sentence about what’s broken is enough to get started.

joel@joelcedras.dev