What is Libertad?

Libertad is a cyber security advisory firm based in Cape Town, delivering security and technology advisory services globally. We specialise in cloud security, governance, and risk management, working with small and mid-sized organisations across South Africa, Europe and the United States.

How can we help your organisation?

We help in three ways: building security as a formal, ongoing program from the ground up; supporting and extending your existing security or IT team with specialist capacity; and running point-in-time assessments, audits, and due diligence. See our [Case Studies] page for examples of the type of work we deliver.

What is our process/engagement workflow?

Most engagements starts with a scoping conversation to understand your environment and goals, followed by a proposal outlining approach, timeline, and cost. From there we move into discovery, delivery, and a final handover with clear findings and next steps — whether that’s a report, a hardened environment, or an ongoing support arrangement.

What are our rates / how is pricing structured?

Pricing depends on the size, complexity, and duration of the engagement — a short assessment is priced differently to an ongoing program-support retainer. Contact us at hello@libertad.co.za to discuss your requirements and get a scoped quote.

Do you publish cyber security content?

Yes — see our Updates page for our latest thinking on cloud security, governance, and risk management.

What frameworks and standards do you work with?

We work across frameworks including ISO27001, NIST, ISF, CIS Benchmarks, Microsoft Zero Trust, and regulatory frameworks such as the Joint Standard, POPIA etc, adapting our approach to whatever standard your industry or regulator require.

Do you work with clients outside South Africa?

Yes – while we’re based in Cape Town, we deliver engagements across South Africa, Europe, and the United States, working remotely or on-site depending on the engagement.

Do you work as a subcontractor or delivery partner for other cyber security firms?

Yes – we are often brought in by other cyber security firms as a specialist delivery partner, handling specific technical pieces of a larger engagement under their name.