Cybersecurity services, run by people you can meet

CRS delivers 8 cybersecurity services with its own people: VAPT Services, Cyber Risk Essentials, ISO 27001 Compliance Readiness, Security Advisory (vCISO), POPIA & Regulatory Readiness, Cyber Maturity Assessment & Tabletop, Security Operations Centre as a Service, Vulnerability Management Services. Partners resell them under their own brand or co-deliver them with CRS.

Both are run by local CRS security analysts based in South Africa. The SOC is monitored 24 hours a day, every day of the year, and the local team onboards each client, tunes detections, handles escalations and runs regular reviews. For vulnerability management, the analysts prioritise findings, deploy patches in agreed maintenance windows and verify every fix.

Yes. Partners can resell any CRS service under their own brand, with CRS delivering behind them, or co-deliver it with CRS. Either way the partner keeps the client relationship.

Each engagement is scoped to the client and quoted. Managed services such as SOC as a Service and Vulnerability Management Services are billed monthly per device; assessments and readiness projects are quoted per engagement.

Each engagement is project-dependent and scoped before it is priced. VAPT is priced once the scoping form is in, ISO 27001 once the gap assessment is done, and Security Advisory (vCISO) is a retainer priced on the size of the organisation.

The kick-off session is held, and the delivery timelines agreed, within 24 to 48 hours of all parties agreeing the terms.

About 12 weeks from gap analysis to certification-ready. The engagement runs the gap analysis, produces the 17 mandatory ISMS artefacts, includes a penetration test and an internal audit, and supports the organisation through the Stage 1 and Stage 2 certification audits. The certification body's audit dates set the day the certificate is issued.

Annually as the baseline, which is what PCI DSS, ISO 27001 and most cyber insurers expect, and again after any significant change: a new internet-facing application, a cloud migration, an acquisition or a major network change. For cover between annual tests, CRS Vulnerability Management Services scans and patches continuously.

Yes, sample reports are shared on request. Ask through the enquiry form and the CRS team will send one for the service.

Yes. On deals registered with CRS, a CRS specialist can join the client meetings, including the first one, at no cost to the partner.

Not from CRS. In a white-label engagement the work is delivered under the partner's brand: reports, deliverables and client communication carry the partner's name, and the partner faces the client. CRS never contracts with, invoices or approaches the partner's client.

It counts. Tier revenue is every deal won with CRS over the last 12 months, so services such as Security Advisory, ISO 27001 and VAPT count exactly like product sales.