IT that stays up and stays safe.
Audits, architecture, hosting and support retainers from one team. We find the weak spots, plan the fixes, then keep your sites, systems, email and devices running, backed up and secure, with a helpdesk your staff can reach.
Good for Growing SMEs · Offices and branches · NGOs and schools · Teams without IT · Online businesses
Advice first, then we run it.
We start with an audit of what you have, plan the fixes in plain language, then host, monitor and support it all on a monthly retainer. One team and one number to call.
IT and security audits
A clear report on your systems, accounts, backups and risks, with fixes ranked by urgency.
Architecture and roadmaps
Which systems, hosting and tools to keep, add or retire, and in what order.
Hosting we manage
Sites and systems on servers we run, with SSL, monitoring, updates and daily backups.
Data Protection Act readiness
Personal data mapped, access tightened, and your ODPC registration and policies prepared with you.
Helpdesk on retainer
Staff raise tickets by email or WhatsApp, with response times agreed in writing.
Email, domains and licences
Google Workspace or Microsoft 365, domains and DNS set up properly and kept renewed.
Your IT on one screen.
Everything we look after for you, in one view: uptime, backups, security, tickets, site visits, devices, the IT roadmap and domains. Click through the modules to see what a monthly retainer covers.
- Monitoring
- Support
- Plans & renewals
- down 6 min1
- in progress1
- failed1
No records match.
New dashboard
Checked every 60 seconds from outside your network. Click a service to open its record.
No records match.
Office link · Mombasa branch · Down since 10:34
- Checks
- Every 60 seconds, from 2 locations
- Down since
- 6 Oct, 10:34, 6 minutes
- Likely cause
- Main fibre link down, 4G backup on
- Effect
- Branch on 4G, ERP slow, VPN reconnecting
- Provider ticket
- Logged at 10:36, ref 88412
- On call
- Dennis Kiprop, support engineer
- Last 30 days
- 99.81% up, 2 drops
- Fault logged with the branch internet provider, ref 88412
- Alert sent to Dennis Kiprop and Brian Omondi by SMS
- VPN stopped answering. The router switched to the 4G backup
- Last drop: 11 minutes, power cut at the branch
Add monitor
- offline1
- done4
- running1
- failed1
No records match.
Laptop · Faith Chebet, Sales · Last backup 3 Oct, 18:40
- Device
- LT-027, laptop bought March 2023
- Owner
- Faith Chebet, sales, Westlands
- Last backup
- 3 Oct, 18:40, 22 GB
- Why missed
- Laptop not online since Saturday
- Kept
- 30 daily copies, encrypted
- Ticket
- T-2326, raised automatically
- Ticket T-2326 raised: laptop offline for 3 days
- Backup skipped: device offline
- Backup skipped: device offline
- Backup done, 22 GB, 412 files changed
Run backup
- open1
- in progress2
- scheduled2
- done2
No records match.
Microsoft 365 · Lydia Atieno, Accounts · 6 Oct, 06:52
- What happened
- Right password used from abroad
- Result
- Blocked at the two-step login
- Device
- Unknown, never seen before
- Risk
- Password leaked, reset needed
- Data at risk
- Finance mail, supplier bank details
- Owner
- Ann Wekesa, systems engineer
- Lydia Atieno called: it was not her
- Alert sent to Ann Wekesa and Amina Abdi
- Sign-in blocked at the two-step login
- Correct password entered from an unknown device
Log incident
No records match.
Urgent · By email · Raised by reception, Westlands at 09:12
- Raised by
- Grace Njeri, reception
- Issue
- info@ mailbox full, mail bouncing
- Priority
- Urgent: customers cannot email in
- Agreed times
- First reply 15 min, fix in 4 hours
- First reply
- 09:19, by Dennis Kiprop
- Plan
- Archive mail older than 2 years
- Mailbox
- info@kilimahealth.co.ke, 50 GB
- Archiving started: 31 GB of mail from before 2024
- Dennis Kiprop replied and took the ticket
- Ticket raised by email from reception
- A pharmacy customer reported a bounced email
New ticket
No records match.
Westlands · Thu 8 Oct, 09:00 to 11:00 · From ticket T-2322
- For
- Amina Abdi, finance & admin
- Job
- Set up laptop LT-044 and move her files
- Technician
- Moses Kibet, 0711 *** 284
- Bring
- LT-044, docking station, handover form
- Old laptop
- LT-012, to be wiped and returned
- Ticket
- T-2322, visit booked
- Amina Abdi confirmed Thursday at 09:00 on WhatsApp
- Visit booked for Moses Kibet from ticket T-2322
- LT-044 delivered and added to the register
- Ticket T-2322 raised: new laptop setup
Book visit
Front office, finance and the two branches: 23 of the 58 devices on the register.
No records match.
Laptop · Faith Chebet, Sales · Westlands
- Model
- 14-inch laptop, bought March 2023
- Warranty
- Ended March 2026
- Last seen
- Sat 3 Oct, 18:40
- Disk encrypted
- Yes
- Antivirus
- Up to date on 3 Oct
- Updates
- 2 waiting, install when online
- Handover form
- Signed 14 Mar 2023
- Flagged offline for 3 days, ticket T-2326 raised
- Last check-in from the Westlands office network
- Monthly updates installed
- Issued to Faith Chebet, handover form signed
Add device
No records match.
High risk · Owner Ann Wekesa · Due Fri 9 Oct
- Finding
- 5 staff sign in with a password only
- Why it matters
- One leaked password opens finance mail
- Fix
- Two-step login for all 46 accounts
- Progress
- 41 of 46 enrolled
- Left
- 3 Mombasa drivers, 2 at the depot
- Cost
- None, included in Microsoft 365
- Two-step login blocked a sign-in on Lydia Atieno's account
- 3 more staff enrolled at the Mombasa branch
- Rollout started, staff guide sent on WhatsApp
- Finding agreed with Amina Abdi at the audit review
New task
- DMARC missing1
- renews soon1
- healthy3
- parked1
- lookalike1
No records match.
Online shop domain · Email on Google Workspace · 8 mailboxes
- Registrar
- DomainMaster, auto-renew on
- Renews
- 3 Mar 2027
- DNS
- Cloudflare, 14 records
- SPF
- Set, passing
- DKIM
- Set, passing
- DMARC
- Missing: others can send as the shop
- Fix
- Add DMARC in monitor mode first
- Weekly mail check: DMARC missing on kilimashop.co.ke
- A customer reported a fake order email from the shop
- Domain renewed for 12 months
- Google Workspace mail set up for 8 shop staff
Add domain
Dashboard
Uptime, tickets, backups and renewals for all three offices on one screen: what Amina checks before the Monday management meeting.
Uptime & hosting
Every site, system and server watched around the clock, with alerts.
- Checks every minute, day and nightSites, systems, VPNs and mail checked every 60 seconds from outside your network.
- Hosting on servers we manageSites and systems on managed servers with SSL, firewall and updates.
- Speed and load tracked over timeResponse times kept, so a site that is getting slower is caught early.
- Monthly uptime reportUptime for each service and every incident with its cause, once a month.
- Alerts by SMS, email and WhatsAppThe engineer on call and your own contact are told within a minute of an outage.
- SSL and domain expiry checksCertificates and domains watched for expiry along with uptime.
- Status page for staffA simple page staff check before raising a ticket about a system being down.
- Branch links watchedBranch VPNs and internet links checked, with the provider called when they drop.
Backups
Daily backups of sites, databases and files, kept off-site and test-restored.
- Daily backups, kept for 30 daysSites, databases and shared drives backed up every night, with 30 daily copies kept.
- Copies stored off-siteA second copy in a different data centre, so a fire or a theft does not take both.
- Restore tests every monthOne backup restored each month to prove it works, with the result logged.
- Laptops and shared drives coveredStaff laptops back up when they are online, shared drives every night.
- Encrypted copiesBackups are encrypted before they leave your servers.
- Alerts on missed backupsA failed or skipped backup raises a ticket the next morning.
- Longer keeping for financeFinance and HR data kept for 90 days or longer, as your policy needs.
- Restore on requestLost a file? Ask the helpdesk and get yesterday's copy back.
Security
SSL, patches, logins and Data Protection Act readiness in one place.
- SSL certificates renewed on timeCertificates renew on their own and are checked 30 days before they expire.
- Updates and patches applied monthlyServers and laptops patched on a set night, urgent fixes within 48 hours.
- Two-step login, odd sign-ins flaggedTwo-step login on every account, and sign-ins from new countries or devices flagged.
- Data Protection Act readiness checklistPersonal data mapped, access reviewed and the ODPC registration tracked.
- Leavers locked out the same dayAccounts, mail and devices of staff who leave are closed on their last day.
- Phishing reportsStaff forward suspicious emails, and the sender is blocked for everyone once checked.
- Breach steps written downWho to call and what to do in the first 72 hours, including telling the ODPC.
- Security score each monthA score out of 100, with the points lost and how to win them back.
Helpdesk tickets
Staff raise issues by email, WhatsApp or portal, and see when they are fixed.
- Tickets by email, WhatsApp or portalStaff raise an issue the way they like, and every one becomes a ticket.
- Response times agreed in writingUrgent, high and normal tickets each have a first-reply time and a fix time.
- Remote fixes, visits when neededMost issues are fixed remotely, and the rest are booked as a site visit.
- Monthly report of every ticketTickets by type, office and person, with times against what was agreed.
- Updates to the person who askedThey hear when the ticket is picked up and when it is fixed.
- Priority by impactAn office without internet comes before one slow laptop.
- Device on the ticketThe laptop or printer on a ticket shows its age, warranty and past issues.
- Fixes written upEach fix is noted, so a repeat issue is solved faster.
- One-tap ratingStaff rate each closed ticket from their phone.
Site visits
On-site visits by office and technician, with the work done written up after each one.
- Visits booked from ticketsA ticket that needs hands on a device becomes a visit with a time and a technician.
- Regular office daysA set day each week or month at each office for checks and small jobs.
- Staff told in advanceThe person who raised the issue gets the time and the technician's name.
- Job notes and photosWork done, parts used and photos added on the phone before leaving.
- Sign-off on siteThe office contact signs on the technician's phone when the job is done.
- Trips planned by officeVisits grouped by office, so one trip covers several jobs.
- Visits in the monthly reportEach visit, its time on site and what was fixed.
Devices & licences
Every laptop, phone and Google Workspace or Microsoft 365 seat accounted for.
- Device register with owner and ageEvery laptop, desktop, phone and printer with its owner, office, age and warranty.
- Workspace and 365 seats trackedLicences counted against staff, so you pay only for the seats in use.
- Leavers locked out the same dayA leaver's laptop is locked and their seat freed on their last day.
- Renewals flagged 30 days aheadLicences, warranties and antivirus listed a month before they fall due.
- Lost or stolen devices wipedA lost laptop or phone can be locked and wiped remotely.
- Encryption and antivirus checkedEach laptop reports whether its disk is encrypted and its antivirus is current.
- Replacement planMachines over 4 years old listed with a budget for replacing them.
- Handover formsStaff sign for the devices they receive, and the form is kept on the register.
Audit & roadmap
The audit's findings turned into a plan: each fix with an owner, dates and progress.
- Findings ranked by riskEvery risk from the audit ranked by how likely it is and what it would cost you.
- A plan you can readEach fix in plain words, with the reason, the cost and who does it.
- Timeline with ownersFixes laid out by week, with the person responsible for each.
- Quick wins firstCheap fixes that remove big risks are scheduled in the first week.
- Work around your hoursMoves and server work booked for evenings and weekends.
- Weekly update for directorsOne page each week on what is done and what is next.
- Spend against the planWhat each fix has cost so far, next to what was planned.
- Second audit after 6 monthsA follow-up audit checks that the risks are closed.
Domains & email
Domains, DNS and email managed in DomainMaster, our own domain product.
- Domains renewed before they lapseEvery domain renews from DomainMaster well before expiry, with a reminder 60 days out.
- DNS changes logged and reversibleEach DNS change is recorded with who made it, and can be rolled back.
- SPF, DKIM and DMARC set upMail is signed and checked, so your invoices land in inboxes, not in spam.
- Mailboxes added and removed quicklyNew staff get a mailbox on day one, and leavers lose theirs on their last day.
- Shared mailboxes and aliasesinfo@, orders@ and accounts@ shared by the people who need them.
- Spam and phishing filteringSpam and fake senders blocked before they reach staff.
- Lookalike domains watchedNew domains that copy your name are flagged, so you can act before customers are fooled.
- One renewal listYour .co.ke, .com and .africa domains on one account and one list of dates.
Custom built, not off the shelf. Every system we build is made to fit the client's needs: the modules, screens, wording and reports follow how your organisation works. The business, names and figures in this demo are examples.
Get your IT sorted.
- A fixed-scope plan and price within 24 hours
- Live in 21 working days, then hosted and supported by us
- Built around how you work, not squeezed into a template
Your answers go straight to the people who build it.
Systems that stay up.
Every site, system and server watched around the clock, with alerts.
- Checks every minute, day and night
- Hosting on servers we manage
- Speed and load tracked over time
Backed up, and tested.
Daily backups of sites, databases and files, kept off-site and test-restored.
- Daily backups, kept for 30 days
- Copies stored off-site
- Restore tests every month
Problems logged, and closed.
Staff raise issues by email, WhatsApp or portal, and see when they are fixed.
- Tickets by email, WhatsApp or portal
- Response times agreed in writing
- Remote fixes, visits when needed
Hosted and looked after by us.
The live platforms on our works page, from Safari Suite and Prestige Industrial to Kilimani Junior Academy, run on servers we manage, with hosting, SSL, backups and updates handled by our team. We also run DomainMaster, our own domain product.
Timeless Timber PMSProduction system
Production, kiln stages, stock and dispatch for a Nairobi hardwood company.
timelesstimber.ke
Prestige IndustrialIndustrial store
Engineering services and a 19,000-part industrial catalogue with quotes and online orders.
pindustrial.co.ke
Garrett AfricaDistributor store
Official Garrett detector distributor for Kenya, Zambia and Tanzania, with catalogue and dealer sales.
garrett.africa
Safari SuiteSafari platform
Real safari itineraries across six countries, clear prices and planning direct with local experts.
safarisuite.africa
Money-WiseLearning platform
Financial tools, courses and coaching to get out of debt and build wealth across Africa.
moneywise.co.ke
Health Financing CoPData platform
Health budget tracker for 22 African countries, with a learning hub for civil society.
healthfinancingcop.africa
Audit and fixes in 21 working days.
- 01Days 1 to 5
Audit
We review your systems, hosting, accounts, devices, backups and data handling, on site and remotely.
- 02Days 6 to 8
Plan
A plain-language report with risks ranked, a target setup and a costed plan to get there.
- 03Days 9 to 21
Fix and move
Quick wins first, then migrations, hosting, email or security changes, scheduled around your work.
- 04Monthly
Support and report
Monitoring, backups, patches and helpdesk on retainer, with a short report every month.
Tools we use Cloudflare · AWS · Google Cloud · cPanel and WHM · Google Workspace · Microsoft 365 · Let's Encrypt · DomainMaster
Before you ask.
What does an IT audit cover?
Your websites and systems, hosting, email and domains, user accounts and passwords, devices, backups, and how personal data is stored and shared. You get a short report with risks ranked and a plan to fix them.
Do you offer monthly IT support?
Yes. A retainer covers monitoring, backups, updates and security for everything we look after, plus a helpdesk your staff reach by email or WhatsApp, with response times agreed in writing.
Can you help us with the Data Protection Act?
Yes. We map the personal data you hold, tighten who can access it, set up backups and breach steps, and prepare your ODPC registration and policies with you. For legal sign-off we work alongside your lawyer.
Can you move our email or hosting?
Yes. We move email to Google Workspace or Microsoft 365, and sites and systems to servers we manage. Each move is planned and tested first, so nothing is lost and staff keep working through the switch.
What does IT support cost?
It depends on the number of staff, devices and systems. After a free scoping call you get a fixed-scope proposal in writing, so you know the monthly cost before we start.
Let's check your IT.
A free scoping call, then a fixed-scope proposal in writing.
