Margsutech
Security-first engineering for businesses crossing borders.
We engineer secure digital platforms that power modern businesses in Kenya and internationally, with cybersecurity and digital forensics training applied directly to how every system is designed and built.
Encrypted end-to-end
AES-256 · at rest & in transit
300+
healthcare facilities served
KES 295M+
managed construction portfolio
3
payment rails in production
0
open security findings, last scan
encrypted at rest · audited by design · isolated by default
Services
What we build, and how we secure it
Security is not a separate line item added at the end of a project. It is scoped, priced, and delivered alongside every build. Expand any service below for what is actually included.
What we build
How we secure it
In development: Digital Forensics & Malware Analysis Lab
An in-house lab for evidence handling and malware analysis, launching once operational and validated on real cases.
Selected work
Real projects, in production today
Medical equipment supply platform
StarMed Technologies
A corporate platform for a Kenyan medical equipment supplier serving government hospitals, private clinics, and NGOs, with a full product catalogue, tender documentation, and KEBS and PPRA compliance credentials.
Construction & civil engineering
Ropi Robi Ventures
A corporate website for a building and civil engineering contractor, showcasing a KES 295M+ project portfolio with a full project gallery and a quote-request system.
Mental health SaaS platform
SalusCare
A clinical psychology platform with AI-guided patient intake, validated assessments including PHQ-9 and GAD-7, online session booking, M-Pesa and card payments via Paystack, and encrypted client-therapist messaging.
Point-of-sale system
MOGMAR POS
A point-of-sale management system for Kenyan businesses with native M-Pesa STK Push integration, KRA ETR receipt compliance, a secure development lifecycle, real-time revenue analytics, and cashier PIN login.
Professional services platform
Sealmiza Co.
A corporate platform for a professional services firm delivering project solutions, infrastructure, IT services, outsourcing, and advisory, with a services showcase, insights blog, and client contact system.
E-commerce marketplace
TumiaTen Marketplace
A marketplace for buying and selling used household items across all 47 Kenyan counties, with M-Pesa integration, automated social media promotion, and a listing-fee revenue model.
Sealmiza Co.'s director has noted that the platform we built them matched the professional standard the firm holds itself to, and has since brought in client inquiries directly through the site.
Samuel Achimba · Director, Sealmiza Co.
Why Margsutech
- +Proven in production, not in theory
- +Security built in from the first commit, not audited in afterward
- +Multi-currency and multi-payment-rail experience from day one
- +A narrow, provable specialism rather than a generalist pitch
Who we serve
- +East African SMEs and enterprises scaling regionally
- +International fintech, healthtech, and e-commerce businesses entering African markets
- +Organisations that need payment-rail and security expertise most offshore development shops don't have
We are Margsutech
Principles we build every engagement around
001
Security by design
Every feature is threat-modelled before it is built, not audited after the fact. Security is scoped and priced alongside the work, never bolted on at the end.
002
Assume breach
Logging, monitoring, and incident response are built as though a compromise is inevitable, so detection does not depend entirely on prevention succeeding.
003
Encrypt everything
Data is encrypted at rest and in transit as a baseline for the whole system, not an exception applied only where it seemed necessary afterward.
004
Auditability
Every privileged action, including data access and payment events, is written to a tamper-evident trail your team can actually see, not just take on trust.
Technology
The stack we actually build on
Every technology below is in production in delivered work or in the platform we run our own operations on. We do not list tools we have only read about.
Frontend
- React
- Next.js
- TypeScript
- Tailwind CSS
Backend
- Node.js
- NestJS
- Python
- REST APIs
Data
- PostgreSQL
- Supabase
- Prisma
Payments
- M-Pesa / Daraja
- Paystack
- Stripe
Infrastructure
- Docker
- DigitalOcean
- Vercel
- Cloudflare
Security & operations
- Clerk
- Sentry
- PostHog
- OWASP practices
Process
How we work
Seven stages, each ending in something you receive. No stage is complete because we say so; it is complete when the deliverable is in your hands.
01
Discovery
A free call to understand the business problem, budget range, and technical constraints before anyone talks solutions.
Written summary of scope
02
Proposal & SOW
A scope of work covering deliverables, timeline, and clause coverage for IP assignment and data handling.
Signed contract
03
Architecture
Data model, integration points, and threat modelling for anything touching payments, credentials, or sensitive records.
Architecture document
04
Development
Built in milestone increments with progress visible throughout, not held back for a single reveal at the end.
Milestone releases
05
Testing & security review
Automated tests plus a dedicated security pass: dependency scanning, static analysis, and access-control verification.
Test and scan results
06
Deployment
Staged rollout behind a firewall and CDN, with backups and monitoring in place before the system carries real data.
Live system, documented
07
Support
Agreed upfront rather than negotiated after launch, covering monitoring, fixes, and a documented handover.
Support agreement
Have questions?
Frequently asked questions
Secure web and SaaS engineering, payment integration across Kenyan and international rails, and cybersecurity-informed development. We deliberately stay narrow rather than offering every technology service, so what we do take on is backed by real production experience.