Operating out of Cape Town, South Africa, KMSEC is a boutique information security consultancy that bridges the gap between deep-tier technical exploitation and boardroom risk. We reject the industry standard of off-the-shelf automated scanning. Instead, our methodology is built entirely on forensic-level manual assessments, custom tooling, and continuous low-level security research.
We believe the true value of a security consultancy lies in our ability to place expert eyes where our clients cannot. This forensic-level diligence delivers unparalleled insight, genuinely broadening their capabilities, fortifying defenses, and enhancing market readiness against evolving threats.
Our commitment to an ever-growing research output and active threat intelligence ensures KMSEC not only stays aligned with the dynamic cybersecurity landscape but actively contributes to its advancement. We anticipate and adapt to industry shifts and adversarial tactics, keeping our clients ahead.
Effective risk consulting is inherently people-centric. Our approach is tailored to your organization's unique needs, ensuring that security measures are practical, not prohibitive. Led by experienced consultants, we provide guidance aligned with industry best practices, enabling you to maintain operational agility while remaining secure and unexposed.
KMSEC is founded and led by Keith Makan, an established information security consultant, vulnerability researcher, and author. With a career trajectory that includes experience at KPMG across South Africa and the Netherlands, as well as consulting for global security firm IOActive, Keith brings tier-one expertise to complex threat models.
His deep technical focus lies in binary analysis, reverse engineering, and automated vulnerability detection, built upon a foundation of over 10 years of experience in advanced web security and cloud infrastructure analysis. Currently a PhD candidate at the University of the Western Cape, Keith's research centers on the automated detection of race condition vulnerabilities in binary programs using symbolic execution. He is a frequent contributor to the global security community, recently presenting his custom concolic execution framework, Zorya, at the Black Hat Asia Arsenal in Singapore.