Serianu

What Serianu does

Serianu is a Pan-African cybersecurity and business consulting firm headquartered in Nairobi, Kenya, operating across 8 countries (Kenya, Uganda, Tanzania, Ethiopia, Nigeria, Ghana, Lesotho, Botswana). The firm delivers a layered portfolio of cybersecurity services: consulting (risk assessments, vulnerability management, governance and strategy), proprietary risk quantification via the CVEQ™ methodology, 24/7 incident response and forensics (CIRT), managed security services (Network Activity Monitoring, Database Activity Monitoring, Transaction Monitoring, and Web Defacement Monitoring), data protection compliance (GDPR, CCPA, ISO/IEC 27701), and workforce training through the Africa Cyber Immersion Center (ACIC). The company has supported 200+ organizations, delivered 20,000+ hours of support, and trained over 1,000 professionals.

The core technology is built around CVEQ™ (Cyber Visibility and Exposure Quantification), a proprietary assessment framework that quantifies cyber risk across 6 dimensions, 14 distinct drivers, and over 43 quantifiable levers covering Risk Profile, Appetite, Controls, Visibility, Exposure, and Tolerance. The managed security services platform supports cross-correlated NOC and SOC analytics across cloud and on-premises environments with integrations into SAP, Salesforce, Siebel, and Workday, and database coverage across Oracle, SQL, MySQL, MsSQL, and Postgres. Threat intelligence is informed by analysis of over 200 local and global attacks (Fraud, IP theft, Sabotage).

Serianu generates revenue through professional services engagements (consulting, risk assessments, training) and managed security subscriptions, with BFSI as the primary vertical (26.4% of the Africa cybersecurity market in 2024). Distribution combines direct enterprise sales across regional offices with consortium-based delivery via the Cyber Shujaa program (USIU-Africa, Kenya Bankers Association, Challenge Fund for Youth Employment). The firm has published 20+ industry reports since 2014 and is privately held with no disclosed funding rounds.

Name

Serianu

Legal name

Serianu Limited

Website

https://serianu.com

Company type

Private

Operating status

Operating

Headcount range

11–50 employees

Short description

Serianu is a Pan-African cybersecurity and business consulting firm headquartered in Nairobi, Kenya, providing risk quantification (CVEQ™), managed security services, incident response, and training to 200+ organizations across 8 African countries, with BFSI as the primary vertical.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting and Managed Security Services

NAICS

Other Computer Related Services (541519), Security Systems Services (56162)

SIC

Services-Management Consulting Services (8742), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Managed Detection & Response (MDR) & SOC Services (HDADAGAG)

akta.pro secondary industries

Security Operations Center (SOC) as a Service (BPAEADAB), Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF), Vulnerability Management & Penetration Testing Services (BPAEADAD), Security Awareness, Training & Compliance Attestation (HDADAIAJ)

Keywords

• Cybersecurity consulting
• Managed security services
• Incident response
• Risk quantification
• Security training

Headquarters

HQ city

Nairobi

HQ country

Kenya

HQ region

Africa

Offices5 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Cybersecurity Consulting Services: Comprehensive risk assessments, vulnerability management, and tailored strategies for mitigating threats. Includes governance and strategy alignment, threat landscape monitoring, and security framework implementation.
2. Managed Security Services: Continuous monitoring, incident response, and proactive threat intelligence services delivered as ongoing subscriptions. Includes network activity monitoring, database activity monitoring, transaction monitoring, and website/social media monitoring.
3. Training and Awareness Programs: Cybersecurity awareness training through programs, certifications, and workshops. Includes penetration testing training, Certified Ethical Hacking (C|EH), Blue Teaming, Risk Quantification, SIEM management, and executive training courses.
4. Data Protection Services: Privacy frameworks implementation and compliance with global standards such as GDPR, CCPA, and ISO/IEC 27701.
5. Business Strategy Alignment: Integration of cybersecurity into core business strategies for long-term success and resilience.

Go-to-market motion2 records

Distribution channels3 records

Marketing channels8 records

Core offering

Serianu delivers integrated cybersecurity consulting, managed security services, and training programs to enterprises across Africa. Its core offering combines proprietary cyber risk quantification (CVEQ™), continuous monitoring of network and database activity, 24/7 incident response, and certified training programs delivered through the Africa Cyber Immersion Center (ACIC). Services span risk assessment, vulnerability management, remediation, transaction and web monitoring, and workforce certification across BFSI, government, and enterprise customers.

Product overview

Serianu is an award-winning Pan-African cybersecurity and business consulting firm offering a comprehensive portfolio of cybersecurity services and solutions. The core offerings include the Cyber Visibility and Exposure (CVEQ) assessment platform for cyber risk quantification, Security Assessment and Assurance services, and Incident Response and Forensics (CIRT). The managed security services suite comprises Network Activity Monitoring, Database Activity Monitoring, Transaction Monitoring, and Website and Social Media Monitoring. Additionally, the Africa Cyber Immersion Center (ACIC) provides cybersecurity training and certification programs. These products and services work together to provide end-to-end cybersecurity coverage from assessment through monitoring to incident response and remediation.

Differentiator

Problem solved

Functional benefit

Brands

• Africa Cyber Immersion Center (ACIC): A cutting-edge hub for research, innovation, and training dedicated to addressing cybersecurity challenges faced by Africa. Provides education, hands-on training, advanced research infrastructure, and certification programmes.
• CVEQ (Cyber Visibility and Exposure)

Products and services

• Cyber Visibility and Exposure (CVEQ™) Risk Quantification A proprietary cyber risk quantification assessment platform that simulates complex attack scenarios and provides ongoing testing of an organization's cybersecurity posture. Assesses cyber risk across 6 dimensions (Cyber Risk Profile, Cyber Risk Appetite, Controls, Visibility, Exposure, and Tolerance), 14 distinct drivers, and over 43 quantifiable levers, providing measurable cyber security visibility and exposure metrics for enterprise organisations.
• Security Assessment and Assurance Comprehensive security assessment service covering governance and strategy, secure network architecture, vulnerability management, disaster recovery, log management, data protection, and identity and access management using frameworks such as CVEQ, NIST CSF, ISO/IEC 27001, COBIT, and CIS Controls.
• Incident Response and Forensics (CIRT) 24/7 Computer Incident Response Team service providing incident response capabilities for handling security incidents including data breaches and ransomware attacks, with forensics analysis and legal support for organisations across Africa.
• Remediation and Implementation On-demand security experts service that helps organizations prioritize, implement, and execute cybersecurity remediation plans including security technology implementation, policy design, and configuration review.
• Network Activity Monitoring Real-time network monitoring service providing centralized security visibility across cloud and on-premises environments with cross-correlated NOC and SOC analytics, asset self-discovery, and single pane of glass management.
• Database Activity Monitoring
• Transaction Monitoring Financial and operational transaction monitoring service using Database Activity Monitoring to ensure data integrity, detect anomalies, and support regulatory compliance with GDPR, PCI DSS, and HIPAA.
• Website and Social Media Monitoring Web defacement monitoring service that continuously compares baseline content to live websites hourly, providing immediate alerts on unauthorized changes with webpage content analysis, integrity checks via hashing, and image analysis.
• Africa Cyber Immersion Center (ACIC) Training Programs Cybersecurity research, innovation, and training hub providing programs including penetration testing training, Certified Ethical Hacking (C|EH), blue teaming, risk quantification, SIEM management, and executive/board training for developing cybersecurity professionals across Africa.

Quantifiable outcome

• Organizations gain clear snapshot of cybersecurity posture across Anticipate, Detect, Respond, and Contain capabilities
• +2 more outcomes

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

Feature7 records

Partnerships

Three partnerships are on record, tiered core and minor.

• USIU-Africa (United States International University Africa)coreStrategic or Co-development Partner · 27 August 2025USIU-Africa is a key consortium partner in the Cyber Shujaa cybersecurity training programme. The university hosts the Africa Cyber Immersion Center (ACIC) and provides academic infrastructure for training delivery. This partnership enables Serianu to deliver certification programs and conduct research in collaboration with academia.
• Kenya Bankers AssociationcoreStrategic or Co-development Partner · 27 August 2025Kenya Bankers Association is a consortium partner in the Cyber Shujaa programme, providing industry expertise and facilitating access to financial sector organizations for cybersecurity training and services. The partnership addresses the BFSI sector's significant cybersecurity needs (26.4% market share).
• Global Cyber Alliance (GCA)minorStrategic or Co-development PartnerGlobal Cyber Alliance partnership supports Serianu's mission to improve cybersecurity across Africa by providing resources, tools, and frameworks for cybersecurity preparedness and protection.

Scale indicators7 records

Recent moves7 records

Expansion highlights6 records

Emerging players

• Nclose: South African-based MSSP offering managed detection and response, SOC, and cybersecurity consulting across Africa. Directly comparable as an African-focused managed security services competitor.
• Performanta: Cybersecurity services firm with strong focus on African and EMEA markets, specializing in managed security, identity, and compliance. Comparable to Serianu in size, regional orientation, and managed services focus.

Broad incumbents

• PwC Africa: Big Four professional services firm offering cybersecurity consulting, risk management, and assurance across Africa. Directly comparable in targeting enterprise and BFSI clients with similar risk, compliance, and cybersecurity services.
• EY Africa: Big Four firm with a strong cybersecurity advisory practice across Africa, serving financial institutions and large enterprises with risk quantification, compliance, and managed services.
• KPMG Africa: Big Four firm offering cybersecurity advisory, GRC, and IT risk services across African markets. Competes with Serianu for enterprise risk assessments and compliance engagements.
• Trustwave: Global MSSP offering managed detection and response, database security, and security consulting with a presence in African markets. Overlaps with Serianu's network/DAM and managed SOC services.
• Orange Cyberdefense: Global MSSP and cybersecurity services arm of Orange, with operations in Africa. Directly competes with Serianu's managed security services, SOC, and incident response offerings.
• BDO East Africa: Global accounting and consulting network with East African presence, offering IT risk, cybersecurity, and advisory services. Competes with Serianu for advisory and managed security engagements in Kenya and the region.
• Accenture Africa: Global management consulting and technology services firm with substantial African cybersecurity practice covering managed security, GRC, and security transformation for large enterprises.
• Deloitte Africa: Global Big Four firm with extensive African cybersecurity consulting and risk advisory practices. Competes with Serianu for enterprise cybersecurity assessments, GRC, and managed security engagements across multiple African markets.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/serianultd
• GitHubgithub.com/ACIC-Africa
• YouTubeyoutube.com/channel/UCx8X4oC2ciiMUnmMnaLVdhQ
• LinkedInlinkedin.com/company/serianu-limited

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Serianu