Skip to main content
Cybersecurity products & services

Full-spectrum information security

Security software we build, GovPAM for privileged access and KeyCare Pass for password management, backed by one accountable team across prevention, detection and response: 24/7 security operations, offensive testing, threat hunting and security-first architecture, aligned to MITRE ATT&CK.

Explore the products
ONE ACCOUNTABLE TEAM · ALIGNED TO MITRE ATT&CK01PreventPenetration testingRed teamingVulnerability analysisvCISO & advisoryEnterprise architecture02DetectSIEM engineering24/7 SOC monitoringThreat huntingDark-web monitoring03RespondTriage & investigationIncident responseContainmentRemediation verificationVerified remediation & retestFindings from every engagement flow back into hardening —remediation tracked to verified closure.
Products

Security software we build

Two products designed, built and supported by Dark Pools: one for the accounts that can change everything, one for the credentials everyone uses every day.

Product · Self-hosted privileged access managementGovPAMGovPAM finds the privileged accounts in your estate, takes custody of their credentials, grants access for a set period and records what administrators and suppliers do with it.Product · End-to-end encrypted password managerKeyCare PassKeyCare Pass stores passwords, passkeys, payment cards, identities, secure notes and SSH keys in a vault that is encrypted on the user’s device before anything is synced.
Defensive services

Defensive: detect and respond

DefensiveSOC-as-a-ServiceDark Pools runs a 24/7 Security Operations Center for your environment from operations centers in the United States and Southern Africa.DefensiveSIEM engineeringA SIEM only detects what it ingests, parses correctly and has rules for.DefensiveThreat huntingAutomated detection catches what someone has already written a rule for, and threat hunting looks for what slipped past.
Offensive services

Offensive: prove what an attacker could do

OffensivePenetration testingA penetration test shows you what an attacker sees and how far they could get.OffensiveVulnerability managementScanners produce long lists.
Advisory services

Advisory: build the program and the architecture

AdvisoryvCISO & security advisoryNot every organization needs, or can recruit, a full-time chief information security officer.AdvisoryEnterprise architectureSecurity added after a system is designed is expensive and incomplete.AdvisoryCloud securityCloud environments change daily, and one misconfigured permission or storage setting can expose data to the internet.
Security operations

Defend, detect, respond. Around the clock.

00:0006:0012:0018:0024/7SOC monitoring · UTCCONUS SOCUnited StatesSouthern Africa SOCCape Town · JohannesburgFollow-the-sun coverage — markers show each centre's local midday

Dark Pools pairs round-the-clock security operations centers in the United States and Southern Africa with offensive security and hypothesis-driven threat hunting, backed by the same intelligence platform used by governments and financial institutions.

  • 24/7 SOC monitoring from continental US and Southern African operations centers
  • SIEM engineering: log ingestion, correlation and detection use cases
  • Hypothesis-driven threat hunts mapped to MITRE ATT&CK
  • Offensive security: penetration testing, red team and social engineering
  • Risk-based vulnerability management with verified remediation
  • vCISO advisory, compliance readiness and zero-trust architecture
Enterprise architecture

Security as a design input, not an afterthought

Zero-trust boundaryIdentity · segmentation · least privilegeBusinessBusiness capability & governanceDataData architectureApplicationApplication portfolioTechnologyCloud & hybrid infrastructure

Architecture consulting that maps business capability to data, application and technology layers, with governance and zero trust built in from the first diagram.

  • TOGAF-aligned architecture across business, data, application and technology
  • Zero-trust roadmaps: identity, segmentation and least privilege by design
  • Cloud and hybrid security architecture with cross-domain controls
  • Technology governance, standards and architecture review boards
In the field

Where we are brought in

EnterpriseRansomware readiness for a regional bankA mid-size bank knows it is a ransomware target but runs no overnight security coverage and has never tested how far an attacker could actually get.Around-the-clock watch, kill chain rehearsedEnterpriseCloud migration without a CISOA fast-growing enterprise is moving core workloads to the cloud with no security executive, no architecture baseline and auditors already asking questions.Audit-ready security posture from day one
FAQ

Cybersecurity questions

Get started

Take the next step

Around-the-clock watch, a rehearsed kill chain and a defensible architecture, from one accountable team.

See use cases