Abusha Technology keeps Kenyan government, county, institutional and corporate systems patched, hardened, monitored and backed up. Aligned to ISO/IEC 27001, CIS Benchmarks and the Kenya Data Protection Act, 2019.
Our security practice keeps systems current, finds weaknesses before attackers do, and gives management a prioritised, CVSS-scored picture of risk.
Scheduled OS and application patching with pre-checks and rollback snapshots, plus emergency zero-day patching within agreed SLA hours.
Internal and external scans, web-application testing aligned to OWASP, mail-platform testing and scoped grey/black-box penetration tests.
CIS Benchmark hardening for Ubuntu, RHEL-family and Windows Server, least-privilege access and segmented, firewalled networks.
24×7 monitoring and alerting, centralised logging, intrusion detection and file-integrity monitoring with defined response times.
3-2-1 backup design with off-site and cloud copies, quarterly restore tests, documented DR runbooks and failover drills.
Gap assessment against ISO 27001 and the Kenya Data Protection Act 2019, security policies and staff awareness training.
| Package | What you receive | Cadence |
|---|---|---|
| Security health check | One-off external + internal scan, configuration review of servers, mail and firewall, executive risk report | Once · 3–5 days |
| Patch & vulnerability management | Patching windows, scans, CVSS-prioritised remediation, compliance dashboard | Monthly |
| Penetration test | Scoped grey/black-box test, proof-of-concept exploits, remediation workshop, re-test | Annual or pre-go-live |
| Managed security & backup | 24×7 monitoring and alerting, log retention, backup verification, incident response | Continuous · under SLA |
| Compliance readiness | Gap assessment against ISO 27001 / DPA 2019, policies, staff awareness training | Project + annual review |
Then it stays that way under a managed-services SLA. You get audit-ready evidence, a named contract manager and one point of escalation.
Illustrative outcomes from a managed patch & vulnerability programme.
Free scoping call, site or remote survey and asset inventory.
Itemised quotation, milestones, rules of engagement and NDA.
Work inside agreed change windows with snapshots and rollback.
Post-work vulnerability scan, runbooks, credentials handover.
30-day hypercare, then SLA-based managed support.
Linux/Windows server builds and OS upgrades, Zimbra 9.x/10.x multi-server platforms (LDAP, proxy/MTA, mailbox, archive), Postfix/Dovecot, Microsoft 365 / Google Workspace hybrid, migrations and decommissioning. See the reference Zimbra upgrade scope →
Laptops, desktops, servers, storage, printers, UPS, structured cabling, switches, routers, firewalls and access points, software licensing and ICT support contracts.
IP CCTV, access control and biometrics, alarms and electric fencing, AV and conferencing, solar and backup power — network devices delivered on segmented VLANs with default credentials changed.
Genuine toners and consumables, stationery, cleaning supplies and office furniture under fixed-price framework contracts with countrywide delivery.
PVT-EY13LVRRPrivate Limited Company · 06 March 2021PIN P052520051STCC KRAWON1539838826 · valid to 08 March 2027NT/PPD/2026/DGW/2818Valid to 10 March 2028 · 30% reserved windowSR/eGP/2026/63000Goods, Works, Consultancy & Non-Consultancy · to 06 April 2028External and internal scan, configuration review of servers, mail and firewall, and an executive risk report — delivered in 3 to 5 days. We respond to every enquiry within one working day.