Cybersecurity Services in Kenya

Endpoint Logic helps organisations in Kenya identify and reduce cybersecurity risk. We carry out vulnerability assessments, design security policies, configure endpoint and email protection, and train staff — giving you a clear picture of your exposure and a practical plan to address it.

Last updated 22 October 2026

What's included

  • Vulnerability assessment Automated and manual scanning of your network, systems, and applications to identify vulnerabilities before attackers do.
  • Security audit Review of your current security posture: access controls, patch levels, password policies, logging, and configuration.
  • Security policy design Written policies for acceptable use, access control, incident response, and data handling — tailored to your organisation size and sector.
  • Endpoint protection Antivirus, EDR, and device management configured across your laptops, desktops, and mobile devices.
  • Email security SPF, DKIM, DMARC, and anti-phishing controls configured to reduce email-borne threats.
  • Staff awareness training Practical sessions covering phishing, social engineering, password hygiene, and safe use of company systems.

How engagement works

#StepTypical timing
01 AssessmentScoping session to understand your environment, key assets, existing controls, and risk priorities. 1–2 days
02 EvaluationVulnerability scanning, manual review, and policy audit. Findings documented with risk ratings. 3–10 days
03 RecommendationsWritten report of findings, prioritised by severity, with specific remediation actions and timelines. 3–5 days
04 Remediation and reviewFixes implemented per the agreed plan. Follow-up scan confirms issues are resolved. Varies by scope

Technologies and tools

We work with the tools you already run where possible. Common technologies we support:

  • OpenVAS / Nessus
  • Metasploit (authorised testing)
  • Microsoft Defender
  • Sophos / ESET
  • Cloudflare Access
  • Proofpoint / Mimecast
  • Authy / Microsoft Authenticator (MFA)

Frequently asked questions

What is a vulnerability assessment?

A vulnerability assessment scans your systems for known weaknesses — unpatched software, open ports, misconfigured services, and weak access controls — and produces a prioritised list of findings with recommended fixes. It is not a penetration test, but it is the right starting point for most organisations.

How often should we do a security review?

At minimum once a year, and after significant changes to your infrastructure. For organisations handling financial data or personal data at scale, quarterly reviews are more appropriate.

Do you do penetration testing?

We carry out authorised penetration testing engagements with a signed scope document and rules of engagement. Contact us to discuss what you need.

Can you help with compliance requirements?

Yes. We can map your current security posture against common frameworks and regulatory requirements relevant to Kenya and help you close the gaps.

Is this done on-site or remotely?

Most of the assessment can be done remotely with appropriate access. On-site work in Nairobi and Kiambu is available where physical review is needed.