Banner Image

Skills

  • Data Security
  • Ethical Hacking
  • Penetration Testing
  • Email Security
  • Firewalls
  • Information Technology
  • Security Consulting
  • Security Testing
  • Social Engineering

Services

  • Web & Network Vulnerability Assessment

    $50/hr Starting at $100 Ongoing

    Dedicated Resource

    Proactive security scanning for your web applications and network infrastructure. Using industry-standard tools and manual verification, I identify critical weaknesses (SQLi, XSS, Broken Auth) before...

    Data SecurityEthical HackingPenetration TestingSecurity ConsultingSecurity Testing

  • Social Engineering & Phishing Simulation

    $50/hr Starting at $400 Ongoing

    Dedicated Resource

    est your "human firewall" with a simulated, ethical phishing campaign. I design realistic scenarios tailored to your industry to identify which employees are susceptible to credential theft or malware...

    Data SecurityEthical HackingFirewallsPenetration TestingSocial Engineering

  • OSINT & External Attack Surface Mapping

    $50/hr Starting at $100 Ongoing

    Dedicated Resource

    What does a hacker see when they look at your company? I perform deep-dive Open Source Intelligence (OSINT) to find leaked credentials, exposed sensitive documents, and subdomains you didn't know existed...

    Data SecurityEmail SecurityEthical HackingInformation TechnologyPenetration Testing

About

Think Like a Hacker, Secure like a Pro

The Vision and Foundation
Tanosec was established with a singular, uncompromising mission: to provide enterprise-grade cybersecurity intelligence to organizations that cannot afford to be a "soft target." Founded in Bloemfontein, South Africa, Tanosec was born from the realization that while the digital landscape is borderless, the impact of cybercrime is deeply local.

The name Tanosec has become synonymous with a "Think Like a Hacker" philosophy. We believe that you cannot effectively defend a network unless you understand the mind of the person trying to break into it. By adopting an offensive mindset, we help our clients identify their "blind spots" before they are discovered by malicious actors. What began as a specialized consultancy has grown into a boutique agency that serves as a digital guardian for small businesses, educational institutions, and private clients worldwide.

The Tanosec Methodology
We follow a rigorous, four-phase lifecycle for every project we undertake:

1. Discovery & OSINT (The Digital Footprint) Every attack starts with information. We perform deep-dive Open Source Intelligence (OSINT) to see what your company is leaking. This includes hunting for leaked credentials on the Dark Web, identifying "Shadow IT" (forgotten servers and subdomains), and mapping your external attack surface.

2. Active Vulnerability Assessment Using a combination of industry-leading scanners and manual exploitation techniques (OWASP Top 10), we probe your defenses. We look for SQL injections, broken authentication, misconfigured cloud buckets, and outdated software headers. When we are in "Kali Mode," our focus is total: finding the one open port that could lead to a total compromise.

3. The Human Firewall (Social Engineering) A firewall is only as strong as the person managing the password. Tanosec specializes in ethical phishing simulations. We don't just send "fake emails"; we craft realistic, industry-specific scenarios that test your staff's ability to spot a threat. This is followed by empathetic, clear security awareness training that empowers employees rather than shaming them.

4. Executive Remediation & Reporting A scan without a plan is useless. Tanosec’s pride is our reporting. We translate complex technical jargon into actionable business intelligence. Our reports provide a clear "Risk Score," followed by step-by-step instructions for your IT team to patch the holes we’ve found.

Our Commitment to Ethical Hacking
Tanosec is built on the principles of transparency and integrity. We have a proven track record of securing sensitive environments, ranging from schools to private network security for high-net-worth individuals. We operate with a strict "No Harm" policy, ensuring that all testing is non-disruptive to your business operations.
When you hire Tanosec, you aren't just hiring a "tech guy"—you are partnering with a dedicated security researcher who is invested in your long-term safety.

Founded: 2025

Work Terms

Tanosec operates on a specialized schedule to accommodate both local South African clients and international partners across GMT, CAT, and EST time zones.

Standard Business Hours: Monday – Friday, 08:00 to 17:00 (SAST/CAT).

International Support: We provide dedicated "After-Hours" windows for North American and European clients between 18:00 and 21:00 (SAST) for synchronous strategy calls and debriefs.

Emergency Response: Existing retainer clients receive access to a 24/7 emergency contact protocol for active incident response or critical vulnerability mitigation.

Clear, documented communication is the backbone of successful security testing. To ensure a clear "paper trail" for audit and compliance purposes:

Primary Communication: Formal project updates, technical queries, and milestone submissions are conducted via Email or the Guru WorkRoom.

Synchronous Strategy: For scoping calls and post-assessment debriefs, we utilize Zoom, Microsoft Teams, or Google Meet.

Agile Updates: For quick, day-to-day coordination, we are available via WhatsApp or Signal during business hours.

The "Plain English" Guarantee: While we live in the terminal, we don't expect you to. We specialize in translating "Red Team" findings into clear, actionable business language that stakeholders can understand.

Rules of Engagement (ROE) & Confidentiality
Security is a matter of trust. Before any technical work begins, Tanosec requires a signed Rules of Engagement (ROE) document. This document clearly defines the IP ranges, domains, and systems in scope, ensuring all testing is legal, ethical, and non-disruptive. We maintain a strict confidentiality policy; your data, findings, and vulnerabilities are never shared, and all sensitive data is securely purged from our systems upon project completion unless otherwise agreed.