MWR CyberSec

What MWR CyberSec does

MWR CyberSec is an independent, research-led cybersecurity consultancy headquartered in Johannesburg, South Africa, serving enterprise clients across Africa and the Middle East. The firm structures its offering around seven practice areas: Security Assurance (web, mobile, API and network penetration testing against frameworks such as OWASP Top 10 and OWASP Mobile Top 10), Cloud Security (AWS, GCP, Azure and Kubernetes design and configuration reviews), DevSecOps Consultancy (integration of security into the software development lifecycle), Cyber Defence (Red Team engagements, Targeted Attack Simulation, Active Directory Security Review, Attack Path Mapping and Attack Detection Capability Assessment), Managed Services (vulnerability scanning, password audit, External Asset Mapping), Digital Forensics and Incident Response (24/7/365 incident response retainer with ~15-minute average remote triage and 12-24-hour on-site support plus incident readiness training), and Strategic Consultancy (Cyber Security Maturity Assessment and Pragmatic Threat Modelling). It also runs four instructor-led training courses (Proactive Web Defence, Proactive Network Defence, Proactive Mobile Defence: Android, Proactive DevSecOps Defence). The company holds CREST-approved member status, operates a single Johannesburg headquarters, and employs 51-100 people.

Underlying service delivery is human-expert-led with proprietary offensive and defensive methodologies (APM, ADCA, TAS, ADSR, PTM) developed in-house and refreshed through ongoing consultant research that is presented at conferences such as 0xcon Johannesburg and BSides Cape Town. The technology footprint spans IaaS, PaaS and SaaS cloud environments, containerised Kubernetes estates, Active Directory, mobile platforms and external asset monitoring; there is no published software-as-a-product or SaaS platform component, and no proprietary AI/ML models. The firm positions itself through research credibility, CREST accreditation, and depth in MEA-specific threat contexts rather than through productised tooling.

MWR monetises its expertise primarily through bespoke professional services engagements (penetration testing, red team operations, cloud and DevSecOps assessments, strategic advisory) supplemented by managed services retainers (vulnerability scanning, IR retainers), incident response on-demand, and paid instructor-led training. Pricing is quote-based and not publicly disclosed; go-to-market is direct enterprise field sales with no channel or reseller distribution identified. Customer concentration sits predominantly in banking and financial services across MEA, with additional exposure to telecommunications, media, energy/utilities, insurance and technology sectors. The company is privately held, has no disclosed funding rounds or external investors, and was founded in 2003.

Name

MWR CyberSec

Legal name

MWR CyberSec

Website

https://mwrcybersec.com

Company type

Private

Founded year

2003

Operating status

Operating

Headcount range

51–100 employees

Short description

MWR CyberSec is an independent, CREST-accredited cybersecurity consultancy headquartered in Johannesburg, delivering research-led penetration testing, red team, cloud, DevSecOps, DFIR and strategic cybersecurity services to enterprise clients across the Africa and Middle East region, with a primary footprint in banking and financial services.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting Services

NAICS

Other Computer Related Services (541519), Computer Systems Design and Related Services (54151), Computer Training (61142)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Managed Detection & Response (MDR) & SOC Services (HDADAGAG)

akta.pro secondary industries

Security Operations Center (SOC) as a Service (BPAEADAB), Cybersecurity Training & Awareness Programs (BPAEANAF)

Keywords

• Cybersecurity consulting
• Penetration testing services
• Incident response services
• Red team operations
• Security assurance

Headquarters

HQ city

Gauteng

HQ country

South Africa

HQ region

Africa

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Professional Cybersecurity Consulting Services: MWR generates revenue through specialised security consulting engagements including Security Assurance (application, mobile, and network security testing), Cloud Security assessments, DevSecOps Consultancy, Cyber Defence (Red Team, ADSR, TAS, APM, ADCA), Digital Forensics and Incident Response, and Strategic Consultancy. These are bespoke professional services engagements tailored to individual client needs.
2. Cybersecurity Training Courses: MWR offers instructor-led cybersecurity training courses including Proactive Web Defence (3-day), Proactive Network Defence (3-day), Proactive Mobile Defence: Android (2-day), and Proactive DevSecOps Defence (3-day). These are exercise-driven courses delivered by experienced security professionals.
3. Managed Services: Continuous services assisting clients in managing their internet-exposed estates through external asset mapping and vulnerability management services, including vulnerability scanning, password audit, and External Asset Mapping (EAM). Provided on a retainer or ongoing engagement basis.
4. Incident Response Retainer: 24/7/365 incident response support service capable of providing remote and on-site support during live security incidents. Provides immediate first-line triage via hotline for retainer clients, with remote investigator support within 3 hours (averaging 15 minutes) and on-site support within 12-24 hours.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels7 records

Core offering

MWR CyberSec is an independent cybersecurity consultancy that delivers research-led professional security services across seven practice areas: Security Assurance, Cloud Security, DevSecOps Consultancy, Cyber Defence, Managed Services, Digital Forensics and Incident Response, and Strategic Consultancy. The company also offers instructor-led cybersecurity training courses in web, network, mobile, and DevSecOps defence. Services are delivered via bespoke consulting engagements tailored to enterprise client needs.

Product overview

MWR CyberSec is an independent cybersecurity consultancy offering a portfolio of specialist security services rather than a single unified product. The core service offering spans seven main practice areas: Security Assurance (web/mobile/API/network vulnerability assessments), Cloud Security (AWS/GCP/Azure/Kubernetes assessments), DevSecOps Consultancy, Cyber Defence (Red Team, TAS, ADSR, APM, ADCA), Managed Services (vulnerability scanning, EAM), Digital Forensics and Incident Response (24/7 IR, forensics, training), and Strategic Consultancy (maturity assessment, threat modelling). The company also delivers four instructor-led training courses: Proactive Web Defence, Proactive Network Defence, Proactive Mobile Defence: Android, and Proactive DevSecOps Defence. The offering is structured as consultancy-based professional services delivered by technical security consultants, with no software-as-a-product or SaaS platform component.

Differentiator

Problem solved

Functional benefit

Products and services

• Security Assurance Comprehensive assessment of web and mobile applications, underlying APIs, and external and internal network infrastructure to identify exploitable vulnerabilities against standards such as OWASP Top 10 and OWASP Mobile Top 10, targeted at enterprise organizations.
• Cloud Security Security assessments for IaaS, PaaS, and SaaS cloud implementations across multiple providers (AWS, Kubernetes, GCP, Microsoft Azure), including design and configuration reviews of deployment security architecture, targeted at organizations migrating to or operating in the cloud.
• DevSecOps Consultancy Consultancy services helping organizations improve or adapt security practices in their software development process, integrating security into development lifecycle activities, targeted at software development teams and security leaders.
• Cyber Defence Offensive, defensive and collaborative engagements using extensive knowledge of real-world attacker TTPs, including Red Team, Targeted Attack Simulation, Active Directory Security Review, Attack Path Mapping, and Attack Detection Capability Assessment, for organizations needing to test their detection and response capabilities.
• Managed Services Continuous services for managing internet-exposed estates through external asset mapping and vulnerability management, including vulnerability scanning, password audit, and external asset mapping, targeted at organizations needing ongoing perimeter security oversight.
• Digital Forensics and Incident Response 24/7/365 incident response support with remote and on-site capabilities, plus incident readiness consultancy including first responder training, threat hunting training, and simulation exercises, targeted at organizations needing rapid breach response.
• Strategic Consultancy Cyber security strategy advisory services including Cyber Security Maturity Assessment and Pragmatic Threat Modelling to align security with business risk appetite and threat profiles, targeted at executive leadership and security program owners.
• Proactive Web Defence Training Three-day instructor-led cybersecurity training course in web application security and secure coding practices, teaching how to identify, exploit and remediate common web application security flaws including OWASP Top Ten, for security and development professionals.
• Proactive Network Defence Training Three-day training course in network security teaching defensive techniques against attacks of all levels including APTs, covering reconnaissance, exploitation, privilege escalation, and network hardening, for network and security professionals.
• Proactive Mobile Defence: Android Training Two-day training course on Android application security and secure coding practices, covering mobile application vulnerabilities from OWASP Mobile Top Ten and Mobile Application Security Verification Standard, for mobile developers and security professionals.
• Proactive DevSecOps Defence Training Three-day training course on common attack vectors affecting the entire Software Development Life Cycle, from code development through to deployment, covering secure pipeline development, for DevOps engineers and security professionals.

Named customers3 records

Segments7 records

Ideal customer profiles6 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature7 records

Partnerships

Two partnerships are on record, tiered core.

• Wits UniversitycoreStrategic or Co-development Partner · 25 November 2025MWR CyberSec is an international collaborative partner in Wits University's two new postgraduate cybersecurity degrees (Bachelor of Science Honours and Master of Science), effective from 2026. The collaboration involves contributing to advanced cybersecurity curriculum and AI applications in cybersecurity, aiming to strengthen South Africa's resilience against cyber threats and foster international research partnerships.
• CISPA Helmholtz CentercoreStrategic or Co-development Partner · 25 November 2025CISPA Helmholtz Center for Cybersecurity and Privacy is an international collaborative partner alongside MWR CyberSec in Wits University's new postgraduate cybersecurity degree programmes. CISPA contributes research expertise and academic rigour to the programmes focused on advanced cybersecurity principles and AI applications.

Scale indicators3 records

Recent moves5 records

Expansion highlights5 records

Broad incumbents

• NCC Group: Global cybersecurity consultancy that acquired the original MWR InfoSecurity. Operates a large offensive-security and assurance practice across multiple geographies, making it a direct comparator for MWR CyberSec's service catalogue and brand heritage.
• Orange Cyberdefense: International MSSP and consultancy (parent Orange) offering managed detection, incident response and offensive security — including its acquired South African unit SensePost. Comparable as a regional competitor with broader managed services footprint than MWR CyberSec.
• EY Cybersecurity Consulting: Big Four cyber advisory practice covering identity, managed SOC, offensive security and incident response. Comparable as a large incumbent competing for the same regulated, enterprise MEA buyer segments.
• Trustwave: Global MSSP and security consultancy offering penetration testing, managed detection and DFIR. Comparable to MWR CyberSec in combining offensive security consulting with managed and incident response services for enterprise clients.
• Deloitte Cyber Risk Services: Big Four advisory practice delivering cyber strategy, red team, managed detection and incident response globally. Comparable as an enterprise-facing cybersecurity consultancy competing for the same regulated banking and telco clients in MEA.
• PwC Cybersecurity & Privacy: Big Four cyber practice spanning strategy, threat intelligence, managed detection and incident response. Comparable to MWR CyberSec as a full-spectrum cybersecurity consultancy targeting financial services and telecom buyers in MEA.
• WithSecure (formerly F-Secure): Nordic-origin cybersecurity firm that historically acquired parts of the original MWR business. Operates a consultancy arm alongside products, comparable to MWR CyberSec as a research-driven offensive security provider expanding into managed services.
• KPMG Cyber Security Services: Big Four advisory cyber practice offering strategy, GRC, offensive testing and managed security services. Directly comparable to MWR CyberSec's enterprise GTM motion into banks, insurers and telcos across emerging markets.

Direct peers

• SensePost (now Orange Cyberdefense): South Africa-born research-led offensive security consultancy. Direct regional peer to MWR CyberSec, with overlapping service lines (penetration testing, red team, research-led consulting) and similar talent-driven model in the same MEA market.

Emerging players

• BSI Cybersecurity and Information Resilience: Standards-body-origin cybersecurity services firm offering consulting, testing and managed services. Comparable as a mid-sized consultancy building recurring service revenue alongside bespoke engagements, similar to MWR CyberSec's managed services + IR retainer mix.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

• Xx.com/MWRCyberSec
• YouTubeyoutube.com/channel/UCBFZkh9bg7wi2M-FtEZbcKg
• LinkedInlinkedin.com/company/mwr-cybersec

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about MWR CyberSec