Da Vinci Forensics & Cybersecurity provides cybersecurity, digital forensics and fraud investigation services to businesses in Nelspruit (Mbombela) and across Mpumalanga. The Lowveld’s economy runs on agriculture, forestry, logistics and tourism, and the businesses behind those industries face the same cybercrime as their Johannesburg counterparts, usually with far less access to specialist help.
That gap is exactly what we close. We are headquartered in Cape Town and deliver for Mpumalanga clients remotely, with on-site attendance arranged when a matter requires evidence collection or a physical presence. You get certified investigators and court-ready forensic work without needing a specialist firm on your doorstep.
Cybercrime does not skip the Lowveld
There is a persistent belief among regional businesses that cybercriminals target the big metros. The opposite is often true. Attackers deliberately target businesses outside the major centres because they expect weaker defences, less security awareness and slower incident response.
The matters we see affecting Mpumalanga businesses include invoice and supplier payment fraud against agricultural producers, packhouses and co-operatives, where large seasonal payments to suppliers and buyers make redirected banking details devastating. Tourism and hospitality operations around the Kruger Lowveld face booking fraud, cloned lodge websites and card payment compromise. Logistics and transport operators on the Maputo corridor deal with business email compromise targeting freight payments. And SMEs across the region face ransomware, WhatsApp account hijacking and SIM-swap fraud like everywhere else in the country.
Under the Cybercrimes Act 19 of 2020 these are defined offences, and under POPIA a breach of customer or employee data carries notification obligations regardless of where in South Africa your business operates.
Our services for Nelspruit and Mpumalanga businesses
Everything below is delivered remotely to the Lowveld, with on-site attendance available where a matter requires it:
- Cybercrime and fraud investigation: payment redirection, impersonation, advance-fee fraud, cloned websites and hijacked accounts, traced and documented for recovery or prosecution.
- Digital forensics: forensically sound imaging and analysis of computers, phones and cloud accounts, with documented chain of custody and reports prepared for South African courts.
- Penetration testing: network, web application and cloud testing with clear, prioritised findings, sized appropriately for regional businesses rather than enterprise-only scopes.
- Digital threat monitoring: monthly dark web scanning, brand impersonation detection and attack surface monitoring, a practical option for businesses without in-house IT security.
- OSINT investigations: open-source intelligence for due diligence on new trading partners, buyers and suppliers.
- POPIA and governance advisory: practical compliance for businesses that need to demonstrate safeguards without a compliance department.
Built for businesses without a security team
Most of our Mpumalanga clients do not have an IT security function. Many rely on a local IT support provider for day-to-day systems. We work well in that arrangement: your IT provider keeps systems running, and we handle the specialist layer they are not resourced for, including forensic investigation when something goes wrong, independent testing of the environment they manage, and ongoing monitoring that flags problems early.
Where fraud has already happened, speed matters more than geography. Evidence such as email logs, banking timelines and domain records can be preserved remotely within hours of first contact, long before anyone could drive or fly to you. On-site collection of physical devices, where needed, is then scheduled as part of the engagement or handled through our documented secure courier procedure with chain of custody maintained end to end.
Working with attorneys and accountants in Mbombela
For Nelspruit attorneys, forensic accountants and auditors, we provide the digital evidence layer in fraud, employment and commercial matters: email header and metadata forensics, device imaging and analysis, cryptocurrency tracing and exhibit-ready chronological evidence bundles. Our investigators hold recognised certifications including Certified CyberCrime Investigator (CCCI) and provide expert witness testimony in South African courts, including matters before the Mpumalanga Division in Mbombela.
Frequently asked questions — Nelspruit and Mpumalanga
Q1. Do you have an office in Nelspruit? No. We are headquartered in Cape Town and serve Nelspruit and Mpumalanga through remote delivery, with on-site attendance scheduled for evidence collection and matters that require a physical presence. Most of our work is location-independent.
Q2. Our supplier’s banking details were changed by email and we paid the wrong account. Can you help? Yes, and quickly. This is invoice redirection fraud, one of the most common matters we investigate. Contact us immediately: the first hours matter for preserving email evidence, tracing the fraud and supporting your bank’s recall attempt and the SAPS case.
Q3. We use a local IT company. Do we still need you? The two roles are different. Your IT provider runs and supports your systems. We independently test those systems, monitor for threats and investigate incidents forensically. We regularly work alongside local IT providers rather than replacing them.
Q4. Is remote penetration testing as good as on-site testing? For most businesses, yes. The majority of real-world attacks come in over the internet, which is exactly what remote testing simulates. Where a scope genuinely needs internal or physical testing, we include an on-site component in the proposal.
Q5. What does an investigation or assessment cost? Investigative work is billed hourly at a standard rate and defined scopes such as penetration tests are quoted as fixed fees. Every engagement starts with a confidential scoping call and a written estimate before any work begins.
Speak to an investigator about your Mpumalanga matter
Confidential, no-obligation scoping call. Whether it is a fraud that has already happened or defences you want tested, we will tell you exactly how we would approach it.
Da Vinci Forensics also serves businesses in Cape Town, Johannesburg and Pretoria.
