What response time do you guarantee for a critical incident?

For clients under an MSA with SLA or a managed-services subscription, a P1 (critical) incident gets a response within 30 minutes and a restoration target of 4 hours. Times run within support hours (Monday to Friday, 08:00–17:00 WAT) unless the client has 24/7 cover.

Where is our data stored?

Client data hosted by HEKATE stays on HEKATE infrastructure in Cameroon, encrypted at rest and in transit, unless the client agrees otherwise in writing.

Do you test our systems without written permission?

No. Vulnerability assessments and penetration tests require a written authorisation and rules of engagement before any work starts.

Is a re-test included after a penetration test?

Yes. HEKATE offers one re-test of the reported findings within 60 days of the report, at no charge.

How can I check that a HEKATE document is genuine?

Every HEKATE document carries a digital signature and a QR verification code. Scan the code or enter the reference on app.hekatesystems.com/verify.

What are your support hours?

Monday to Friday, 08:00–17:00 (West Africa Time), excluding public holidays. 24/7 cover is available to clients with that contract. An engineer replies to enquiries within one business day.

Services

Six practices, one team: the people who assess a system are the people who can fix it.

Cybersecurity & SOC

Penetration testing, vulnerability assessment, managed security monitoring, incident response and compliance audits.

Managed IT & infrastructure

Networks, servers, cloud and hosting, backup and disaster recovery, with monitoring and on-site support.

Software & platforms

ERP, hospital and banking systems, web and mobile apps, APIs and SaaS — built, deployed and supported.

AI, data & automation

AI assistants and agents, analytics, automation flows and document processing, governed for data protection.

Identity systems

National ID cards, digital and mobile ID, biometric enrolment and verification for governments and institutions.

Training & consulting

Security awareness, IT governance, risk assessment and certification training for teams and leadership.

Available now

Enterprise networking and connectivity. LAN/WAN architecture; Cisco/MikroTik routing and switching; VLANs; branch interconnection; wireless; MPLS integration; IPsec VPN; remote access; Starlink integration; connectivity troubleshooting.
Network and infrastructure security. FortiGate/firewall configuration; segmentation; secure VPN; least-privilege access; network and server hardening; access-control reviews; firewall-rule review; secure remote administration.
Systems and server administration. Windows Server 2016–2022; Active Directory; DNS/DHCP; IIS; Linux administration; SQL Server infrastructure support; patching, configuration, troubleshooting and documentation.
Managed IT and monitoring (MSP). Remote and on-site helpdesk; Zabbix monitoring; preventive maintenance; incident triage; configuration backup; change management; asset inventory; monthly operational reporting and SLA-based support.
Data centre, virtualisation, backup and continuity. Server/rack installation; RAID/storage; Proxmox virtualisation; UPS coordination; backup strategy and monitoring; restore testing; disaster-recovery planning.
Cloud and hybrid connectivity. AWS VPC and site-to-site VPN; hybrid routing; secure cloud interconnect; managed AWS/Azure.
Business applications. Hospital-management, banking/microfinance and ERP deployment, support and user training; Microsoft 365 administration.
Field and sector support. Structured cabling and fibre deployment support; CCTV/IP surveillance infrastructure; healthcare application infrastructure and training; financial-services infrastructure support.

Specialist services

Delivered with signed authorisation and qualified personnel.

Vulnerability assessments, penetration testing, red teaming and application security — written authorisation and rules of engagement required.
Digital forensics and malware analysis — lawful authority, evidence handling and chain of custody.
SOC/SIEM and managed detection and response.
ISO 27001 implementation assistance and PCI DSS readiness — advisory (HEKATE is not a certification body or QSA).
Digital identity verification and KYC onboarding (hecID).
Background screening for employers — with recorded consent, lawful sources and a dispute route.
Hosting, private cloud, VPS, Backup-as-a-Service, Disaster-Recovery-as-a-Service.

Identity systems for governments

Under contract with or authorisation of the competent public authority and in compliance with data-protection law.

National identity systems and physical identity documents — national ID cards, residence permits, passports, driving licences, voter, health and access cards, including polycarbonate and smart-chip cards with security printing.
Digital and mobile identity, electronic identity (eID) and identity wallets.
Biometric enrolment, capture, matching and verification (fingerprint, face, iris).
Civil-registration and population registers, identity verification (KYC) and authentication services.
Card production, personalisation and data centres.

AI, data and automation

AI models, assistants and agents including speech and language technologies for Cameroonian and African languages; AI consulting, governance, risk assessment and audit; data engineering, analytics and BI; business-process and workflow automation, RPA, API orchestration, low-code/no-code automation flows, intelligent document processing.

Software and digital trust

Software, web and mobile apps, SaaS, APIs and platforms; ERP and system integration; PKI, digital certificates, electronic signatures and seals, timestamping, document authentication and verification, secure printing of certificates and documents (regulated trust services after accreditation).

Emerging technology security

Security of AI systems and models, deepfake and synthetic-media detection, post-quantum cryptography migration, OT/ICS and IoT security, satellite and space-systems security.

Research and laboratory programme

Cyber ranges and network-security simulations; firewall and endpoint evaluation; blue-team exercises; authorised penetration-testing laboratory; isolated malware analysis; development of monitoring, security automation, threat analytics and AI-assisted defensive systems.

Training and advisory

Professional training, awareness, simulations, IT and security governance, risk assessment.

Other statutory activities

Equipment and technical trade.
Digital solutions for regulated sectors (fintech, govtech, health-tech, ed-tech as technology provider).
Telecommunications, hosting and technical infrastructure (licensed).
IT staffing, BPO and managed SOC.

Questions we are asked

What response time do you guarantee for a critical incident?: For clients under an MSA with SLA or a managed-services subscription, a P1 (critical) incident gets a response within 30 minutes and a restoration target of 4 hours. Times run within support hours (Monday to Friday, 08:00–17:00 WAT) unless the client has 24/7 cover.
Where is our data stored?: Client data hosted by HEKATE stays on HEKATE infrastructure in Cameroon, encrypted at rest and in transit, unless the client agrees otherwise in writing.
Do you test our systems without written permission?: No. Vulnerability assessments and penetration tests require a written authorisation and rules of engagement before any work starts.
Is a re-test included after a penetration test?: Yes. HEKATE offers one re-test of the reported findings within 60 days of the report, at no charge.
How can I check that a HEKATE document is genuine?: Every HEKATE document carries a digital signature and a QR verification code. Scan the code or enter the reference on app.hekatesystems.com/verify.
What are your support hours?: Monday to Friday, 08:00–17:00 (West Africa Time), excluding public holidays. 24/7 cover is available to clients with that contract. An engineer replies to enquiries within one business day.