I lead the cybersecurity and technical assurance practice at HarLyn Digital Partners, working alongside Harrison Ndeke (Co-Founder & AI Systems Lead). My work ensures that as organisations adopt AI assistants, automated integrations, and modern web architectures, they do so with rigorous security boundaries and zero-trust data protection.
Cybersecurity Expertise
My core practice is authorised security assurance: scoped web application, API, and cloud configuration assessments conducted under written rules of engagement, evidence-led threat triage that separates real exploit paths from vanity scanner alerts, and clear remediation roadmaps that non-technical decision-makers can act on. This is documented in practice through the AI Integrated Smart Packet Analyzer (a machine-learning network intrusion detection system evaluated on 82,332 held-out UNSW-NB15 benchmark flows) and the Munar security baseline and handover.
AI Security Expertise
As AI-powered products, RAG pipelines, and autonomous agents move into production, the security questions shift: who can call which tool, what happens when a retrieved document tries to redirect the model, and what a human-approval boundary actually needs to look like for a consequential action. This work is documented on the AI Security Kenya, RAG Security, and AI Agent Security service pages, and in the Prompt Injection and LLM Security field note.
Certification
Core clearance for authorised security assessment methodology, threat detection, and defensive architecture principles.
Role at HarLyn Digital Partners
HarLyn Digital Partners is a two-person practice: Harrison Ndeke leads AI systems, n8n automation, and web engineering; I lead cybersecurity assurance, KDPA compliance, and secure-architecture review across everything the firm builds. Two internal products under active development reflect that split and overlap: TrustCapsule (zero-trust data escrow, built and tested, pre-launch) and HarLyn Sentinel (AI-assisted security monitoring, in active development) — both built jointly, security-led by me.
Professional Mission
"Many providers build websites, automate workflows, or conduct security reviews in isolation. At HarLyn Digital Partners, we treat security, automation, and maintainability as one continuous system: map → secure → build → test → document → hand over."
Rather than relying on generic scanner output or fear-based sales tactics, my work is grounded in verifiable evidence, authorised scopes, Kenyan Data Protection Act (KDPA) regulatory frameworks, and clear remediation pathways.
Most engagements begin with the Secure Digital Workflow Assessment — a fixed-scope, two-to-three-week discovery engagement with no obligation to proceed to follow-on build work.
Book a Scoping Call →