Desishub · Kampala, Uganda
Security audits and penetration testing
We find what an attacker would, and tell you how to fix it
Desishub publishes Sentinel, a web application firewall, and Scout, an application security scanner, as open source. The engineers who wrote them review your system — not a reseller running someone else's tool — and you get a report ranked by what an attacker could actually reach, with the fix for each one.
- Written scope before you pay
- A working demo every Friday
- You own the code
Why teams pick us
Key features & benefits
- 01
Application penetration test
Authenticated and unauthenticated testing against the OWASP Top 10: injection, broken access control, authentication flaws, exposed data, misconfiguration.
- 02
Code and architecture review
We read the code, not just the surface — tenant isolation, session handling, secrets management, and how money and permissions move through the system.
- 03
Mobile money and payments
The paths that matter most in this market: MTN MoMo and Airtel Money callbacks, webhook signature checks, replay protection and reconciliation gaps.
- 04
A report you can act on
Every finding gets a severity, the exact request that proves it, and the change that closes it. We re-test the fixes once at no extra cost.
- 05
Sentinel, if you want the shield too
Our open-source web application firewall can sit in front of the system afterwards, so the classes of attack we found stay blocked.
- 06
Written scope, signed first
Testing only ever runs against systems you own or are authorised to have tested, inside an agreed window, under a signed agreement. No exceptions.
FAQ
Frequently asked questions.
01What does a penetration test actually involve?
We agree the scope and the window in writing, then test your application the way an attacker would — looking for ways in, ways to reach data that is not yours, and ways to escalate once inside. You get a report with each finding, its severity, the evidence, and the fix. Nothing is tested outside the agreed scope.
02Do I need to authorise this in writing?
Yes, and we will not start without it. Security testing against a system you do not own or control is unlawful. We need a signed testing agreement naming the systems, the window and the contact who can stop the test, before any scan runs.
03What does a security audit cost in Uganda?
It depends on the size of the application and whether we are testing the surface only or reading the code as well. Most single-application audits for Ugandan SMEs land between UGX 3M and UGX 9M. Tell us what the system does and we will quote in writing within 24 hours.
04How long does it take?
A focused application test is usually one to two weeks, including the report. A full review across a web app, an API and a mobile client takes three to four.
05Will testing take my system down?
We test against a staging copy wherever one exists. Where production testing is unavoidable we agree a window, rate-limit the work, and keep a contact on call who can stop it immediately.
06What makes Desishub different from a reseller?
We write security tooling rather than only running it. Sentinel is our web application firewall and Scout is our security scanner — both open source, both public, both used on our own client systems. You can read the code before you hire us.
Ready to grow your business in Uganda?
Desishub Technologies is the partner you need for world-class web design and custom software development.