Protect what you’ve built,
before it costs you.

DMARC (Domain-based Message Authentication, Reporting & Conformance) is a DNS record that tells the world's email servers what to do when someone tries to send an email pretending to be from your domain. Without it, criminals can send phishing emails that look exactly like they came from you — to your clients, your bank, or your staff. In South Africa, email fraud targeting SMBs has increased significantly. A properly configured DMARC record with p=reject policy blocks these attacks entirely.

For a typical SA SMB, a full POPIA gap assessment takes 3–5 business days. This includes reviewing your data collection practices, processing records, supplier agreements, and existing documentation. We then produce a written gap analysis and a prioritised remediation plan. The initial documentation package (data protection policy, privacy notice, breach response plan) typically takes a further 5–7 days.

Not at all. Our services are designed specifically for business owners and operations managers, not IT teams. We explain everything in plain language, implement changes on your behalf, and provide clear documentation of what was done and why. If you have an IT person or IT company, we work alongside them seamlessly.

If you have our DMARC/SPF/DKIM setup in place, spoofed emails purporting to be from your domain are blocked before they reach anyone. If a staff member clicks a real phishing link, your response speed is what determines the damage. We recommend our Phishing Simulation & Awareness Training service — because a team that has already clicked a (safe) fake link once is far less likely to click a real one.

An email security audit starts at R1,500. A full DMARC, SPF, and DKIM setup (the single most effective anti-phishing measure for most SMBs) is R6,000 with R1,200/month monitoring. A POPIA compliance package starts at R5,000 once-off. Most SMBs start with email security — it has the highest risk-to-cost ratio and can be completed in days.