What we do
Three portfolios, one standard.
Our work is organised into three portfolios, each building the research, infrastructure and standards that African civil society needs to operate safely, and that the continent currently has to import from elsewhere.
Partner with usDigital Resilience
We run the resilience infrastructure African civil society does not have anywhere else: continuous threat intelligence, rapid response coordination, and assessment standards built for the realities of the continent rather than retrofitted from enterprise security elsewhere. This includes the Resilience Model, our proprietary assessment framework, and Zeroth Cloud, alongside a growing body of published research: the Africa Digital Threat Bulletin and the annual State of Digital Resilience in Africa report, both structured to be cited by funders, researchers and peer institutions, not read once and shelved.
Spyware and Surveillance
We lead Africa’s first pan-African spyware accountability consortium: a coalition of researchers, forensic analysts and advocacy and litigation partners producing the investigative evidence the continent has never had at scale. Through the Africa Spyware Observatory, a continuously updated public record of confirmed and credible spyware deployments, and a network of modular forensic labs, we give journalists, activists and their legal advocates the case-ready evidence to hold surveillance actors accountable, not just the tools to detect them.
AI Safety & Governance
As generative AI and algorithmic systems begin reshaping civic space across Africa, we are building the research and governance frameworks that let African institutions, not external actors, define the standards. No pan-African institution currently holds this authority position; we intend to.
Services under the digital resilience portfolio.
Threat investigation
When an organisation faces a targeted attack, we investigate the actors, methods and risk exposure involved, producing the evidence needed for informed action, advocacy and security improvement.
- Investigation of targeted attacks
- Threat actor identification
- Advocacy and security insights
Infrastructure hardening
We identify vulnerabilities across an organisation’s systems and implement the security measures needed to close them, protecting operations from internal and external threats before they are exploited.
- Infrastructure vulnerability assessment
- Web and server security
- Network security enhancements
Incident response
Rapid, round-the-clock threat detection, mitigation and recovery, built to minimise damage and restore safe operation with minimal disruption.
- Crisis response
- Forensic analysis
- Recovery and remediation
Resilience assessment
We evaluate an organisation’s security posture end to end, identifying strengths, pinpointing risk, and building the strategic roadmap to strengthen digital defences against evolving threats.
- Threat and risk modelling
- Comprehensive risk assessment
- Long-term security strategy
Resilience training
Customised training that builds cybersecurity awareness and secure behaviour into an organisation’s culture. Not a one-time session, but a lasting capability.
- Workshops
- Webinars
- On-demand resources
Free resilience consulting
Using the Resilience Model, we provide organisations with a digital resilience review and a tailored improvement plan at no cost. The same rigour behind our research, applied directly to your organisation.
- Digital resilience review
- Advisory services
- Customised improvement plan
Partnered with
- West Africa Civil Society Institute (WACSI)
- The Hague Institute for Innovation of Law (HiiL)
- Nigeria Media Innovation Program (NAMIP) Media Development Investment Fund
- DefendDefenders
- Digital Society of Africa (DSA)
- Open Technology Fund Funder
- TechSoup