Website Penetration Testing & Monthly Security For South African Businesses.
A one-off pen test gives you a snapshot. Real protection is ongoing. We combine in-depth penetration testing with continuous monitoring, so your website stays protected as it grows and changes — for a fraction of the cost of a single traditional pen test.
One Test. One Price. One Point In Time.
A traditional penetration test from an SA security firm typically costs between R40,000 and R95,000 — for a single report on a single day. Then the site keeps changing, plugins keep updating, and new vulnerabilities appear. Most small and medium businesses can't afford that kind of annual spend.
R40,000 – R95,000
Then it's out of date within weeks.
- Single report, single day
- Doesn't cover changes after the test
- No ongoing monitoring
- New vulnerabilities missed
- You still need to fix things yourself
- Costs more than most SMEs can justify annually
From R1,999/month
Continuous protection for 2–4 years, for the price of one traditional test.
- Initial in-depth penetration test
- Monthly vulnerability scanning
- Malware detection & firewall management
- Plugin and core update monitoring
- Uptime monitoring
- Monthly security report
- Priority support when something needs attention
Cyber Crime In South Africa
The numbers aren't theoretical. South African businesses are being actively targeted.
Highest cybercrime victims worldwide (Interpol)
Average cost of a data breach (IBM)
Ransomware attacks in South Africa in the last 2 years
Of national cyber incidents happen in Cape Town
What Monthly Security Actually Covers
Every month, we do the work that keeps your site safe — and you get a clear report on what we found and fixed.
Vulnerability Scanning
Monthly scans identify known weaknesses in your site, plugins, themes and server configuration — before attackers find them.
Malware Detection & Firewall
Continuous monitoring for malicious code and suspicious activity, with firewall rules kept up to date as new threats emerge.
Update Monitoring
We track plugin, theme and core updates — flagging security-critical updates and applying them safely without breaking your site.
Uptime Monitoring
We watch your site 24/7. If it goes down, we know — often before you do. Downtime gets investigated and fixed fast.
Monthly Report
Every month you receive a clear security report: what was scanned, what was found, what was fixed, and any recommendations.
Priority Support
If something needs urgent attention, you have a direct line to us — not a queue at a call centre or a ticket system.
Section 19 Of POPIA Requires You To Secure Personal Information
The Protection of Personal Information Act requires South African businesses to apply "appropriate, reasonable technical and organisational measures" to secure personal information. A website penetration test is the most direct way to demonstrate due diligence — and to prove you took the risk seriously before something went wrong.
Prove you took reasonable steps to secure customer data
Identify vulnerabilities before a breach occurs
Reduce exposure to POPIA fines up to R10 million
Monthly Security Plans
Simple monthly pricing based on the size of the site and level of ongoing attention required. No long lock-in contracts.
For small brochure sites and single-business websites that need the basics covered properly.
- Initial penetration test
- Monthly vulnerability scan
- Malware detection
- Firewall management
- Uptime monitoring
- Monthly security report
- Email support
For business websites, WooCommerce stores and sites where security matters most. Everything in Essential, plus deeper monitoring and faster response.
- Everything in Essential
- Deeper vulnerability scanning
- Manual code review on request
- Priority update handling
- Uptime + performance monitoring
- Weekly health checks
- Priority support (WhatsApp + email)
- Incident response within 4 hours
For multi-site businesses, e-commerce operations and any organisation that needs a higher level of assurance and reporting.
- Everything in Professional
- Multi-site monitoring
- Quarterly deep pen test
- Compliance-ready reporting
- Staging environment for testing
- Dedicated account contact
- Incident response within 1 hour
- Post-incident forensics if needed
What Happens After The Penetration Test
No jargon. No vague threats. Just clear answers and a plan.
A clear understanding of your website's real risks
A simple report written in plain language
A prioritised list of exactly what needs to be fixed
Optional support to help implement the fixes if needed
Who Monthly Security Suits
Small Businesses
You need protection that doesn't cost more than your website did in the first place.
WooCommerce Stores
You handle customer data and payments — so security failures cost more than money.
Professional Services
Attorneys, accountants and consultants who hold client information and need to protect it.
Growing Websites
Your site changes regularly. A one-off test can't keep up with that pace.
Businesses Previously Breached
You've been hacked before, or you want to make sure it never happens again.
Sites With Sensitive Data
Any website that collects personal information, submits forms, or stores customer records.
Website Security Questions
What is website penetration testing?
Penetration testing is a controlled, ethical attempt to find security weaknesses in a website before attackers do. It identifies vulnerabilities in the code, configuration, plugins and server setup — then provides a clear list of what needs fixing.
How is this different from a one-off pen test?
A one-off pen test gives you a snapshot at a single point in time. Websites change — plugins update, new pages launch, code gets edited. Our monthly service combines an initial in-depth penetration test with continuous monitoring, so you stay protected as your site evolves.
How long does a penetration test take?
Typical tests take 3–10 business days depending on the size and complexity of the website. We test on a staging copy where possible, so your live site is never affected.
Will my website be taken offline during testing?
No. We test in a safe, controlled environment — usually on a staging copy of your site. Your visitors experience zero disruption.
What do I get in the report?
You receive a clear, prioritised list of vulnerabilities with proof-of-concept evidence, step-by-step remediation instructions, and a retest after you fix them.
What does the monthly service include?
Each month includes vulnerability scanning, malware detection, firewall rule management, plugin and core update monitoring, uptime monitoring, security reporting and priority support if something needs attention.
Why is a monthly service better value than a one-off pen test?
A single professional pen test in South Africa typically costs R40,000–R95,000. For that same investment, our monthly service gives you continuous protection for 2–4 years — covering not just the initial test, but ongoing scanning, monitoring and remediation support.
Can I add penetration testing to an existing KMK website package?
Yes. Any of our existing website or maintenance packages can be upgraded to include monthly security monitoring and penetration testing.
Do small businesses really need penetration testing?
Yes. Small businesses are often targeted specifically because they have weaker security and are less likely to have monitoring in place. Most attacks today are automated and opportunistic.
What is the difference between a vulnerability scan and penetration testing?
A vulnerability scan uses automated tools to find possible issues. Penetration testing goes further — it actively attempts to exploit those issues in a controlled way to confirm whether they represent real risk.
Do you work with WordPress sites?
Yes. WordPress is one of the most common platforms we secure, along with WooCommerce, custom-built sites and standard business websites.
How often should I test my website?
At least once a year for a static site, and more frequently if you take payments, store customer data, or update the site regularly. Our monthly packages cover this automatically.
Also Under Business Technology
Get monthly security protection for a fraction of a single pen test.
Tell us about your website and what you need. We'll come back with a clear, no-obligation quote — usually within one business day.