What Galix does

Galix (Pty) Ltd is a South African managed security services provider (MSSP) headquartered in Roodepoort, Gauteng, founded in 1995 and operating through The Galix Group, which consists of four wholly-owned subsidiaries: Galix Networking, Galix Security Solutions, Galix Compliance, and Silver Moon IT. The company delivers remote management of IT security infrastructure for businesses across multiple sectors, including 24x7x365 Security Operations Centre monitoring, SIEM, firewall management, intrusion detection/prevention, secure email management, vulnerability management, and penetration testing.

The company's core technology is a managed services stack built around deep channel partnerships with global security vendors — SonicWall, Fortinet, Check Point, Tenable, Aruba, Barracuda, Mimecast, KnowBe4, Rapid7, Orca Security, Horizon3.ai (NodeZero), and others — rather than proprietary platforms. Distinctive capabilities include four PCI Security Standards Council accreditations (QSA, CPSA, P2PE, QPA) enabling payment card compliance assessments, plus POPIA compliance advisory anchored on ISO 27001 methodology. The company also holds a Level One B-BBEE (135%) contributor designation, which is a procurement-advantage credential under South African ICT procurement codes.

Galix generates revenue through recurring managed security services contracts (multi-year) and project-based professional services for compliance assessments, penetration testing, and security consulting. Go-to-market is primarily direct enterprise sales supplemented by channel-led distribution through major security vendors. Pricing is quote-based, tied to scope, infrastructure complexity, and compliance requirements. The company has expanded operations beyond South Africa into Europe (Germany, Serbia), Zambia, and — per its FY26 SonicWall award territory — Turkey and the Upper Gulf.

Name

Galix

Legal name

Galix (Pty) Ltd

Website

https://galix.com

Company type

Private

Founded year

1995

Operating status

Operating

Headcount range

11–50 employees

Short description

Galix is a South African managed security services provider (MSSP) founded in 1995, offering 24x7 SOC monitoring, PCI and POPIA compliance assessments, vulnerability management, and penetration testing to African and select European enterprises via multi-year managed service contracts.

Ownership category

akta.pro rank

Product category

Managed Security Services

NAICS

Security Systems Services (except Locksmiths) (561621), Security Systems Services (56162), Computer Facilities Management Services (541513)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)

akta.pro secondary industries

Security Operations Center (SOC) as a Service (BPAEADAB), Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), Managed Detection & Response (MDR) & SOC Services (HDADAGAG)

Keywords

• Managed security services
• PCI compliance services
• Cybersecurity consulting
• POPIA compliance services
• Vulnerability assessment services

Headquarters

HQ city

Gauteng

HQ country

South Africa

HQ region

Africa

Offices4 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Managed Security Services: Recurring managed services revenue from remote management of customer IT security infrastructure including firewalls, SOC, SIEM, secure email, and endpoint protection on predefined product bases.
2. Professional Security Services: Consulting and advisory services for security solution design, implementation, compliance assessments (PCI DSS, POPIA, ISO 27001), penetration testing, and risk management.
3. PCI Compliance Certification Services: Assessment and certification services for PCI DSS compliance, provided by Qualified Security Assessors, generating fees for compliance validation engagements.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels4 records

Core offering

Galix is a South African managed security services provider (MSSP) that delivers remote management of customer IT security infrastructure, including firewalls, network access control, SIEM, intrusion detection/prevention, secure email, web application firewalls, and 24x7x365 Security Operations Centre (SOC) monitoring. The company also delivers specialized compliance services—PCI DSS assessments (as a Qualified Security Assessor, Card Production Security Assessor, Point-to-Point Encryption Assessor, and PIN Assessor) and Protection of Personal Information Act (POPIA) compliance—alongside consulting, penetration testing, vulnerability management, and security training for businesses across sectors.

Product overview

Galix is a managed security services provider (MSSP) offering a portfolio of cybersecurity services rather than a unified software product with modules. The core offerings consist of Managed Security Services (covering 24/7 SOC monitoring, vulnerability management, email security, and network management), PCI Compliance Services (QSA, CPSA, P2PE, and QPA assessments), POPIA Compliance Services, and Cybersecurity Services (penetration testing, risk management, secure remote access, and security training). Partner solutions such as Horizon3ai NodeZero™ are resold and integrated into service delivery. The services operate independently but are often combined in customer engagements to provide comprehensive IT security posture management.

Differentiator

Problem solved

Functional benefit

Brands

• Galix Networking: Part of The Galix Group operating entity
• Galix Security Solutions
• Galix Compliance
• Silver Moon IT

Products and services

• Managed Security Services Remote management of customer IT security infrastructure for businesses of any size, covering firewalls, network access control, SIEM, intrusion detection/prevention, secure email, and web application firewalls on a predefined-product, recurring basis.
• 24x7x365 Security Operations Centre (SOC) Monitoring Continuous SOC services with alerts sent to relevant teams in line with Incident Response plans, supporting managed firewall, SIEM, secure email, and endpoint environments across cloud, hybrid, and on-premises deployments.
• PCI Compliance Services (QSA, CPSA, P2PE, QPA) Comprehensive PCI Security Standards compliance assessments delivered under four accreditations: Qualified Security Assessor (QSA), Card Production Security Assessor (CPSA), Point-To-Point Encryption Assessor (P2PE), and PIN Assessor (QPA). Targeted at merchants and service providers that accept, process, store, or transmit cardholder data.
• POPIA Compliance Services Step-by-step assistance with Protection of Personal Information Act (POPIA) compliance implementation and transition for South African organizations, using the ISO/IEC 27001 framework to assess policies, procedures, and information security risks.
• Vulnerability Scanning and Penetration Testing External and internal vulnerability scanning, network penetration testing, and continuous autonomous penetration testing (via NodeZero by Horizon3.ai) covering cloud, on-premises, identity, and data systems.
• Risk Management Services Remote and on-site management of IT security infrastructure combined with exposure and risk analysis reporting to help organizations understand and reduce their attack surface.
• Consulting and Advisory Services Design and implementation consulting for security solutions including firewall systems, IDS/IPS, content scanning, antivirus, VPN, two-factor authentication, PKI, endpoint security, NAC, and SIEM.
• ISO Lead Implementer Service Systematic approach to ISO 9001 Quality Management System and ISO/IEC 27001 Information Security Management System alignment and audit preparation for client organizations.
• Information Security and Maturity Assessments Security assessments based on ISO/IEC 27001 and CIS Controls, including penetration testing, network security analysis, physical security analysis, and business continuity/disaster recovery evaluation.
• Secure Remote Access Solutions and Management Management and administration of remote access infrastructure including SSL VPN devices, IPSec VPN connections, and Secure Remote Access Servers.
• Managed Email Security, Continuity, Mail Archiving and Compliance Design and management of email security, continuity, mail archiving, and compliance solutions delivered via on-premise or cloud deployments.
• Security Training Services User awareness training, customized security training, and product-specific security training, including phishing simulation programmes delivered through the KnowBe4 partnership.
• Data Protection Services Backup, continuous data protection, data leakage protection, archiving, and cloud solutions to protect data and support BYOD environments.
• Information Security Policy Design Design, development, and implementation of comprehensive Information Security policies and operational procedures documentation for client organizations.
• NodeZero Autonomous Penetration Testing Platform (Horizon3.ai) Resale and managed operation of the Horizon3.ai NodeZero autonomous penetration testing platform, providing continuous, attacker-perspective testing across cloud, on-premises, identity, and data environments.

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature6 records

Partnerships

Five partnerships are on record, tiered core.

• SonicWallcoreTechnology or IntegrationSonicWall is a major cybersecurity technology partner. Galix has been recognized as SonicWall FY26 Partner of the Year for Africa, Turkey, and Upper Gulf, as well as winning the award in 2020, 2022, and 2023. The partnership involves resale, integration, and deployment of SonicWall security solutions.
• FortinetcoreTechnology or IntegrationStrategic technology partnership for network security solutions including firewalls, secure SD-WAN, and endpoint protection. Fortinet is one of Galix's security vendor alliances.
• Check Point Software TechnologiescoreTechnology or IntegrationStrategic technology partnership for Check Point's cybersecurity solutions including threat prevention, firewall, and security management.
• TenablecoreTechnology or IntegrationPartnership for Tenable.io platform and vulnerability management solutions, supporting Galix's vulnerability scanning and management services.
• Horizon3.aicoreTechnology or IntegrationPartnership for NodeZero autonomous pentesting platform, enabling continuous, attacker-perspective security testing across cloud, on-prem, identity, and data systems.

Scale indicators4 records

Recent moves6 records

Expansion highlights4 records

Direct peers

• Nclose: South African MSSP offering managed SOC, threat detection, and compliance services to mid-market and enterprise clients. Direct peer to Galix in geography, customer base, and managed security delivery model.
• Cybervision: South African cybersecurity services firm offering managed security, GRC, and compliance consulting. Comparable in target market and compliance-led service mix.
• Securicom: South African managed security and IT risk services provider covering SOC, vulnerability management, and PCI/ISO compliance. Comparable to Galix in service breadth and South African enterprise focus.
• BUI: South African IT security and cloud services provider with a strong Microsoft and security portfolio. Comparable as a regional IT security integrator competing for similar South African enterprise wallet.
• Performanta: South African-headquartered MSSP delivering managed security, compliance, and identity services across Africa and Europe. Closely comparable to Galix in target market, service portfolio, and channel-led vendor model.

Broad incumbents

• NTT Data (formerly Dimension Data): Global IT services and security integrator with deep South African roots and substantial managed security operations. Comparable as a broad incumbent in the same enterprise and compliance engagements.
• BCX: One of South Africa's largest ICT services providers, offering managed security and SOC services as part of a much broader portfolio. Comparable as a larger, established competitor in the same buyer accounts.
• Liquid Intelligent Technologies: Pan-African technology and managed services provider with growing cybersecurity offerings across multiple African markets. Comparable as a regional incumbent with broader geographic and capital reach than Galix.
• Altron: Large South African technology group with managed services and security offerings across enterprise and public sector. Comparable as a broad incumbent that competes for the same enterprise security wallet at greater scale.

Others

• KnowBe4: Global security awareness and phishing simulation vendor that Galix resells and integrates into its managed services portfolio. Comparable as an enabling ecosystem partner rather than a direct competitor.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/galixgroup
• Xx.com/GalixGroup

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Subsidiaries4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Galix