National KE-CIRT/CC

What National KE-CIRT/CC does

National KE-CIRT/CC is Kenya's national Computer Incident Response Team – Coordination Centre, a government state entity domiciled at the Communications Authority of Kenya and statutorily established under the Kenya Information and Communications Act 1998. Launched in 2014 and operating on a 24/7 basis, the organization coordinates cybersecurity incident response at the national level through a multi-agency framework comprising technical staff from the Communications Authority, law enforcement agencies, and the ICT Authority. Its core functions encompass proactive threat data collection and analysis, incident triage and coordination, incident resolution support, publication of advisories and best-practice guides, and cybersecurity awareness and capacity building.

Its core technology stack comprises three pillars: (i) a 24/7 national incident response coordination infrastructure accessible via web portal, hotlines, and email; (ii) a Cyber Security Operations Centre (CSOC) for the ICT and Telecom sector established under the 2024 Computer Misuse and Cybercrime Regulations; and (iii) the National Public Key Infrastructure (NPKI), comprising a Root Certification Authority managed by the Communications Authority and a Government Certification Authority managed by the ICT Authority, which issues digital certificates and accredits Electronic Certification Service Providers. The mandate was further reinforced by the 2018 Computer Misuse and Cyber Crimes Act, which established the National Computer and Cybercrimes Coordination Committee (NC4), and by international coordination partnerships with US CERT, JPCERT/CC, FIRST, ITU, and EACO.

As a government entity, National KE-CIRT/CC does not operate a commercial revenue model. Services are provided as a public function free of charge to Kenyan public and private sector organizations, ICT service providers, and citizens, with operational funding flowing through the Communications Authority of Kenya's regulatory budget. Capacity-building activities (Bootcamp, Hackathon, and Mentorship programs) are delivered in partnership with the Ministry of Information, Communications and the Digital Economy, Huawei Kenya, and tertiary institutions, targeting university students and emerging cybersecurity professionals across multiple Kenyan cities.

Name

National KE-CIRT/CC

Legal name

National Kenya Computer Incident Response Team – Coordination Centre

Website

https://ke-cirt.go.ke

Company type

Private

Founded year

2014

Operating status

Operating

Short description

National KE-CIRT/CC is Kenya's national Computer Incident Response Team Coordination Centre, a multi-agency government framework providing 24/7 cybersecurity incident response, threat monitoring, National Public Key Infrastructure, and capacity-building programs to Kenyan public and private sector organizations.

Ownership category

akta.pro rank

Product category

Government Cybersecurity Services

NAICS

International Affairs (92812), National Security and International Affairs (9281), Regulation, Licensing, and Inspection of Miscellaneous Commercial Sectors (92615), Justice, Public Order, and Safety Activities (922)

SIC

Communications Services, Nec (4899), Services-Business Services, Nec (7389)

akta.pro primary industry

Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH)

akta.pro secondary industries

Critical Infrastructure Protection (CIP) & NERC-CIP Compliance (HDADAJAC), Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF)

Keywords

• National cybersecurity coordination
• Incident response services
• Public key infrastructure
• Cyber threat monitoring
• Cybersecurity awareness training

Headquarters

HQ city

Nairobi

HQ country

Kenya

HQ region

Africa

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Infrastructure, Operations, Others

Distribution channels3 records

Marketing channels5 records

Core offering

National KE-CIRT/CC is a government-mandated multi-agency framework that coordinates Kenya's national cybersecurity incident response on a 24/7 basis. It delivers threat detection, early warning advisories, incident triage and resolution, National Public Key Infrastructure (NPKI) services for digital certificates, licensing of Electronic Certification Service Providers, and cybersecurity capacity building through bootcamps and mentorship programs. All services are delivered as a public function free of charge to Kenyan public and private sector constituents, law enforcement, ICT service providers, and the general public.

Product overview

National KE-CIRT/CC is Kenya's national Computer Incident Response Team Coordination Centre — a multi-agency government framework, not a commercial product company. The organization provides cybersecurity incident response coordination (24/7 threat detection, prevention, and response), operates Kenya's National Public Key Infrastructure (NPKI) for digital certificates, licenses Electronic Certification Service Providers, and runs the Cyber Security Operations Centre (CSOC) for the ICT/Telecom sector. Educational offerings include the CA Cybersecurity Bootcamp Series and Mentorship Program. All services are accessed via web portals and hotlines rather than a software product platform.

Differentiator

Problem solved

Functional benefit

Products and services

• National KE-CIRT/CC Core Coordination Service The national cybersecurity coordination center that detects, prevents, and responds to cyber threats targeting Kenya on a 24/7 basis. Acts as the interface between local and international ICT service providers and Kenya's Judicial Law and Order Sector for investigating and prosecuting cybercrimes.
• Incident Reporting Portal Web-based portal for reporting cyber incidents, vulnerabilities, and child-related online abuse incidents to the national CIRT. Accessible to organizations and individuals in Kenya.
• National Public Key Infrastructure (NPKI) A Public Key Infrastructure system coordinated by the Ministry of ICT in collaboration with the Communications Authority and ICT Authority. Comprises a Root Certification Authority (RCA) and Certification Authorities for issuing digital certificates to verify online identities.
• Cyber Security Operations Centre (CSOC) Security operations center for the ICT and Telecom Sector, established under the 2024 Computer Misuse and Cybercrime Regulations to provide enhanced cybersecurity monitoring and response capabilities for the ICT and Telecom sector.
• E-CSP Licensing (Electronic Certification Service Providers) Licensing framework for Electronic Certification Service Providers under the Kenya Information and Communications Act, where providers must be accredited by the Root Certification Authority for globally recognized digital certificates.
• CA Cybersecurity Bootcamp Series Annual cybersecurity competition and training bootcamp for university students, organized by the Ministry of Information, Communications and the Digital Economy, Communications Authority of Kenya, and Huawei Technologies Kenya. Held across multiple cities including Nairobi, Nyeri, Kisumu, Eldoret, and Mombasa.
• Cybersecurity Mentorship Program Knowledge transfer and career development initiative pairing cybersecurity professionals with students from tertiary institutions to build cybersecurity capacity for Kenya's digital transformation.

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Four partnerships are on record, tiered core and minor.

• Communications Authority of Kenya (CA)coreStrategic or Co-development Partner · 1 January 2014National KE-CIRT/CC is domiciled at the Communications Authority of Kenya, which hosts the technical staff from the Authority and various law enforcement agencies. CA provides the regulatory mandate and operational framework.
• ICT Authority (ICTA)coreStrategic or Co-development PartnerCollaborates with ICT Authority for National PKI implementation. ICTA operates the Government Certification Authority (GCA) and manages mainstream government ICT services. Also involved in CA Cybersecurity Bootcamp programs.
• Huawei KenyaminorStrategic or Co-development PartnerHuawei Kenya collaborated with CA for rolling out Cybersecurity Bootcamp and Hackathon Series across multiple cities in Kenya, supporting capacity building initiatives.
• Ministry of Information, Communications and the Digital Economy (MICDE)coreStrategic or Co-development PartnerMICDE partners with CA and Huawei for the CA Cybersecurity Bootcamp Series 2025, providing government-level support for national cybersecurity capacity building.

Scale indicators2 records

Recent moves9 records

Expansion highlights5 records

Direct peers

• NCSC UK (National Cyber Security Centre): UK's national cybersecurity authority providing incident response, threat intelligence, and critical infrastructure protection. Highly comparable as a government-led national CERT serving a single jurisdiction with 24/7 operations and multi-stakeholder coordination responsibilities.
• ACSC (Australian Cyber Security Centre): Australia's national cybersecurity hub providing 24/7 incident response, threat advisories, and critical infrastructure coordination under ASD. Mirrors KE-CIRT/CC's role as a single national point of contact for cyber incident response and multi-agency coordination.
• ANSSI (Agence Nationale de la Sécurité des Systèmes d'Information): France's national cybersecurity agency operating under the Prime Minister's office, providing national incident response coordination, security advisories, and PKI-equivalent trust services. Directly comparable in mandate, scale, and government-anchored delivery model.
• CSA Singapore (Cyber Security Agency): Singapore's national cybersecurity agency overseeing national CERT operations, sector-level CSOCs, and digital trust infrastructure. Comparable in its national mandate, sector-by-sector CSOC expansion strategy, and direct government reporting lines.
• AfricaCERT: Association of African CERTs coordinating cross-border incident response across the continent. KE-CIRT/CC is a member and partner; AfricaCERT is comparable as the regional coordination layer that complements (and partly overlaps with) national CERT mandates like Kenya's.
• CISA (Cybersecurity and Infrastructure Security Agency): The US federal agency responsible for national cybersecurity coordination, critical infrastructure protection, and incident response. Operates as the US national CERT with a near-identical functional mandate to KE-CIRT/CC, including sector-specific coordination, threat advisories, and multi-agency integration.
• BSI (Bundesamt für Sicherheit in der Informationstechnik): Germany's federal cybersecurity agency responsible for national CERT operations, threat monitoring, and critical infrastructure protection. Comparable to KE-CIRT/CC in statutory mandate, multi-stakeholder coordination, and operational breadth across ICT and telecom sectors.

Regional players

• ZA CSIRT (Computer Security Incident Response Team): South Africa's national CSIRT operating under the Council for Scientific and Industrial Research. Most directly comparable African peer to KE-CIRT/CC in scope, regional threat context, and emerging-market constraints — though operating in a larger and more digitally mature economy.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xtwitter.com/KeCIRT
• Facebookfacebook.com/The-National-Ke-cirtcc-109462870967963

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about National KE-CIRT/CC