Security tools and physical sites owned by different teams with no shared incident picture
Cyber & Physical Security
For organisations that need cyber, surveillance and physical-security operations designed as one accountable system — from access and recovery through CCTV AI monitoring, private recording and licensed on-site response.
At a glance
- Cyber hardening, access reviews, patching, backup and tested recovery
- CCTV architecture, AI-assisted alerts, human review and incident workflows
- Private-cloud or on-prem recording with retention, access and audit controls
- Full physical-security operations, including guarding or armed response, only through appropriately licensed providers under separate jurisdiction-specific contracts
What we see most often.
CCTV alerts that nobody reviews, or recordings kept without clear retention and access rules
Sensitive footage and security data sent to infrastructure the client cannot control
Unclear boundaries between technology monitoring, guarding and armed-response providers
Practical help, not a rebuild.
- Cyber hardening, access reviews, patching, backup and tested recovery
- CCTV architecture, AI-assisted alerts, human review and incident workflows
- Private-cloud or on-prem recording with retention, access and audit controls
- Full physical-security operations, including guarding or armed response, only through appropriately licensed providers under separate jurisdiction-specific contracts
- POPIA/GDPR-aware surveillance responsibility mapping and signed operating/SLA schedules
How we work.
Map sites, assets, risks, jurisdictions, lawful-use requirements and provider responsibilities
Establish private infrastructure, monitoring mechanisms, human review and escalation paths
Exercise the incident and recovery runbooks, then review evidence and service levels on the agreed cadence
Seen in practice.
Real systems, measured honestly — every claim labelled verified, estimated, or qualitative.
Crypto transaction platform for a private banking service
Fintech — founder's prior contract (at Kabru) · Transaction flows shipped inside the live private banking platform, deployed as scalable containerised services.
E-commerce platform for a national music rights organisation
Music rights / entertainment — founder's prior agency work (at Glasshouse) · A production e-commerce platform serving a national rights organisation, delivered within an agency team.
Ongoing ownership.
Security operations are individually scoped. CITADEL can combine cyber, CCTV, private infrastructure, on-site support and Stable Buoys; guarding, armed response, 24/7 control-room cover and service credits exist only where the relevant signed provider and SLA schedules explicitly include them.
Explore other support options.
Website Maintenance
For businesses with existing websites that need updates, fixes, SEO implementation, performance work, security support, forms, landing pages, and practical improvement.
Garden Care
The optional monthly care routine for systems a FORT has delivered or stabilised. Garden Care runs on PRUNE — Performance checks, Reports, Updates, Nurture, Enhancements — in three tiers: Garden Care (one agreed application or workflow boundary), Garden Growth (adding one SEO or paid-search lane), and Garden Operations (a broader, individually scoped register).
Web Application Maintenance
For existing applications that need bug fixes, enhancements, refactoring, infrastructure support, and ongoing development.
Not sure this is the right fit?
Start with a free fit check. A paid Technical Review then maps one agreed system or workflow, its risks, dependencies and improvement options. You approve the scope and fee before it starts.
FORT / Sprint Assist — A defined outcome and a scoped delivery cycle — typically a two-week FORT with agreed acceptance criteria and a clean handover.
Reserved Capability — Ongoing access to a fractional digital department: the systems you depend on kept healthy, improved steadily and extended when the business needs it.
Partner / White-label Capability — Delivery support for agencies and partners: our senior engineers behind your client work, under your brand and your client relationship.
Discuss your first FORT