Two ways to put this to work
Speaking about the investigations, or building and securing the thing your organisation actually runs on. Both go through the same inbox.
Talks, panels & media
How a grant system for the poorest was quietly drained
What the SASSA SRD findings actually showed, how they were found without hacking anything, and what happened once they reached Parliament.
The state’s websites, measured
Thousands of security flaws across government’s web estate, how we counted them, and the fixes that are neither expensive nor complicated.
Inside a scam syndicate
Money mules, influencer-fuelled pyramid schemes, and what a R511-million operation looks like from the inside — including the part where we got scammed on purpose.
Security work as a student, without permission slips
For campuses and school groups: how to build a security career from curiosity, disclosure done responsibly, and where the line sits.
- Conference keynote or session (20–45 min)
- Panel and moderated Q&A
- Campus, school and community talks
- Podcast, radio and television interviews
- Newsroom or team workshop on verification and OSINT
- Based in Cape Town, willing to travel
- Remote and pre-recorded both fine
- Two weeks’ notice is comfortable; less is often possible
- English or Afrikaans
- SASSA findings drew national attention and engagement with Parliament
- Mail & Guardian Top 200 Young South Africans, Editor’s Choice
- Featured by MyBroadband and Stellenbosch University
On air
Radio, television and podcast interviews on the investigations. Every one of these is a live conversation about a story I reported.
The SASSA findings also drew interviews and coverage across eNCA, PowerFM, IOL, Die Burger, You Magazine and the SABC.
Consulting
digifend.comDigifend has run websites, servers and workspaces for small businesses, nonprofits and sole proprietorships since 2023. The work is deliberately unglamorous: things that stay up, mail that arrives, and a security review before somebody else does one for you.
Websites, built and hosted
Design and build, domains and DNS, hosting, mail servers, and ongoing maintenance. Stakeholder meetings included, refinements expected.
Security reviews
Vulnerability assessment of your sites and servers, written up with fixes in plain language and ordered by what would hurt most. Incident response when it has already happened.
Cloud & workspace
Microsoft 365, Google Workspace and Azure: setup, migrations, permissions and security settings, plus getting your people moved across without losing anything.
Internal software & systems
Small internal tools built to fit — HR software, automations, reporting — plus third-party rollouts like DocuSeal, Salesforce and SendGrid.
Workstations & support
Machines configured and deployed to fit how the team actually works, with hardware, software and settings sorted before handover.
Graphics
Posters, presentations, billboards, social posts and hero images, for organisations without a designer on staff.
Booking or briefing?
Say what it is, when it is, and who’s in the room. For consulting, a sentence about what’s currently broken is plenty to start.