Bespoke managed IT · South Africa & the Netherlands
We do IT. Simply.
Duo IT Solutions manages, secures and monitors your entire IT, no matter the size or complexity of your organisation. Senior expertise, 24/7 monitoring and POPIA readiness, from Cape Town to Amsterdam. No fuss and no vendor lock-in.
What we build on by default, because it's proven. Using other vendors? No problem: we adopt and work with any vendor you already have.
Mail, Teams and files, with secure sign-in
Cloud and identity, set up properly
The firewall that keeps attackers out
Backups ransomware can't touch
Wi-Fi, switching and cameras in one system
Protection on every laptop and server
Business telephony in the cloud
Desk phones, one standard
What we do
Everything your IT needs. One partner.
Pick an area to see what it means for you. Or let us do all of it: that's where we're at our best.
Problems fixed before you notice them.
All your workstations, servers and switches are continuously connected to our Network Operations Centre. If something goes wrong, we're already on it.
Proactive monitoring, 24/7
Updates and patches on schedule
Vulnerabilities found automatically
15-minute response on critical outages
24/7 NOCRMMESETSNMP
15 minP1 response
A front door that stays shut.
Enterprise firewalls in a redundant setup, secure links between sites and zero-trust access for remote workers. Built to withstand modern threats and ransomware.
ESET protects every workstation and server against threats from inside and outside the network. ESET Cloud filtering checks your mail before it lands, so phishing, spam and malicious attachments never reach your people.
Full ESET protection on every workstation and server
Internal and external threats stopped
Spam and phishing filtering in the cloud
Mail, OneDrive and Teams scanned for malware
ESET EndpointESET Cloud Office SecuritySpam filter
24/7threat monitoring
Backups you can't lose.
Air-gapped backups, local and in the cloud, that cannot be altered. Not even by ransomware. And we actually test the restore, so we know it works.
Immutable storage
Local and in the cloud
Guaranteed recovery times (RTO/RPO)
Regular restore tests
VeeamSynologyCloud-to-cloudAzure Backup
Zero-losstarget
Everyone signed in securely, anywhere.
We move your mail and files to Microsoft 365 with zero downtime and enforce MFA on every account. We then connect that same login to your remote-worker VPN and your other company cloud apps, so everyone uses single sign-on: one secure login for everything, fewer passwords and maximum security.
Zero-downtime migration
MFA enforced on every account
Anti-phishing, baselines and Azure governance
Single sign-on for VPN and cloud apps
Microsoft 365Entra IDMFASSO
0 minmigration downtime
A network that just works.
Tidy server cabinets, labelled cabling and a segmented network where office and production never get in each other's way. Plus Wi-Fi and cameras in one system.
Structured cabling and cabinets
Office and production separated
Full-coverage enterprise Wi-Fi
CCTV and access control
CiscoUniFiUniFi NVR
99.9%uptime at a client
Your core systems, always on.
ERP, databases and file servers on a redundant cluster. If a server fails, everything keeps running. We take over existing hardware with no forced replacement.
Hyper-V failover clusters
No single points of failure
VMware, Linux, Dell, HP and more
Delivered tested and configured
Hyper-VDell PowerEdgeVMware
20critical servers at one client
Use AI safely. Keep the rest out.
One approved business AI for everyone, and a next-generation firewall that stops free AI tools, data leaks and time-wasting sites. Your team gets more productive without company data leaking out.
Business AI tied to your company login
Unapproved AI tools blocked
Data leak prevention at the firewall
Web filtering: work traffic only
FortiGate NGFWWeb filterDLP
0AI tools without your approval
Phones that just work, at every site.
Business telephony with 3CX in the cloud, so no more phone system in the cupboard. Your people call from a Yealink desk phone or the app on their laptop and smartphone. And because we also manage your firewall, calls get priority on the network and stay crystal clear. Ideal for factory floors, logistics desks and companies with several sites.
Hosted 3CX phone system, no hardware on site
One standard: Yealink phones or the 3CX app
Calls get priority on your FortiGate
Lines via established South African carriers
3CXYealinkSIPQoS
1partner for IT and phones
POPIA · Protection of Personal Information Act
POPIA already applies to you. Would you survive a breach report?
If your business holds client or staff details, POPIA applies, whatever your size. Since April 2025, a security breach must be reported to the Information Regulator through its eServices portal, and everyone affected must be told. Duo IT Solutions makes businesses of any size POPIA-ready, without you having to hire a security team.
The Information Regulator
Expects appropriate security, and a report after any breach
asks for proof
Your business
Must show your IT is secure and recoverable
we deliver the proof
Duo IT
Security, backups and 24/7 monitoring, documented in reports
What POPIA asks, in plain language
A front door that stays shut
POPIA asks
Appropriate, reasonable technical measures to protect personal information (section 19)
What it means for you
Nobody gets in unnoticed, not through a remote worker and not through another branch.
What we do
We install an enterprise firewall that blocks suspicious traffic and links your sites with encryption.
Prevent unauthorised access to personal information (section 19)
What it means for you
A stolen password isn't enough to sign in, and every laptop is up to date.
What we do
We enforce two-step sign-in, link that login to your VPN and cloud apps with single sign-on, decide who can access what and install updates automatically.
Microsoft 365 · Entra ID · MFA · SSO · conditional access · RMM patch management · ESET
After an attack, you're back to work fast
POPIA asks
Prevent loss of, or damage to, personal information (section 19)
What it means for you
Even if ransomware strikes, your data is safe and you know how long recovery takes.
What we do
We deploy right-sized resilience, from hybrid Veeam setups to appliance-free cloud-to-cloud backups. Always immutable, kept off the network, with verified restore tests.
What the Regulator fined the Department of Justice after its antivirus and security licences lapsed. Source: SAnews
R17 million
Average ransomware recovery cost in South Africa, before any ransom. Source: Sophos 2026
Supplying banks, insurers or financial services providers?
Since 1 June 2025, Joint Standard 2 requires them to set out security responsibilities in their contracts with suppliers. Expect a security questionnaire. Source: Michalsons
Selling to Europe?
European customers under NIS2 must check their suppliers, including suppliers in South Africa. Our Dutch side knows exactly what they will ask, and our Cape Town team gets you there.
PDF · 1 page
Free download · 5 minutes
POPIA already applies to you. Every breach must be reported. Would you pass?
The POPIA Reality Check: the 7 questions you will face from the Regulator and your customers, the numbers every director should know and a score that tells you honestly where you stand.
Facts from the Information Regulator, Sophos and POPIA itself
7 questions with a scorecard
What a breach costs, in rand
No in-house security department needed.
We deliver the complete, co-managed security POPIA expects, under one predictable monthly fee.
AI at work. Without your data walking out the door.
Your people already use AI, often on a free account and often with customer data in it. We roll out AI safely across the company, and your next-generation firewall makes sure only work traffic leaves the network.
77%
of employees who use AI paste company data into chatbots.Source: LayerX 2025
82%
of those pastes happen on a personal account, out of IT's sight.Source: LayerX 2025
Gambling, adult content and torrentsA risk to your network and your nameOpenBlocked
Without a filter, everything is open. 5 of the 8 are a risk.With Duo IT, work gets priority and the risks stay out.
How we do it
01
One business AI, set up properly
Together we choose an AI tool on a business contract, so your data isn't used to train models. Everyone signs in with their company account.
02
Unapproved AI blocked
Your FortiGate recognises AI services by name. Anything you haven't approved is closed off, even when someone tries a personal account.
03
Data leaks stopped
Files with customer, staff or financial data are recognised and stopped before they leave the network.
04
Work traffic only
We filter the web by category. Business apps get priority, while streaming and social media are blocked or limited to set break times. Gambling, adult content and other unsafe sites always stay out. So does crypto-mining: hidden code that silently harvests your computers' resources without you knowing, making everything sluggish.
05
A monthly overview
A clear report: which AI tools people tried, what was stopped and where the bandwidth goes. Oversight, not surveillance.
Transparent to your people and set up in line with POPIA, with a clear policy everyone can read.
Monitor your network for 7 days. Zero downtime. Zero obligation.
With your permission, we connect a passive FortiGate security sensor to your network to analyse traffic flow, identify hidden vulnerabilities and detect unauthorised external connections over seven days.
Because the assessment runs passively in monitor mode, your daily operations and internet connectivity remain 100% uninterrupted. At the end of the week, you receive a clear, executive-ready report detailing your risk exposure, shadow IT usage and actionable compliance fixes.
Internal threatsInfected devices and suspicious traffic inside your network
External exposureWhat can be seen and reached from the outside
Incoming threatsAttacks and scans knocking on your front door
Unfiltered contentAdult content, torrenting, gambling and crypto-mining
How we work
We come in. We do it. Simple.
Four steps from intake to peace of mind. Hover or tap a step to see what you get.
01
Audit
We map your environment and tell you plainly what we find.
A clear report, no jargon
Risks ranked by urgency
02
Onboarding
We take over your existing setup, with no forced replacement.
No interruption to your work
Everything documented
03
Secure
Firewalls, backups and access sorted, using proven blueprints.
Ransomware-resilient
Ready for POPIA
04
Manage 24/7
Monitoring, patching and fast response. You do your work, we do IT.
The right person, who knows your setup
A quarterly review of your IT
Why Duo
Two cultures. One gold standard.
Duo IT is one company with two identities, Dutch and South African. One team, one standard and one point of contact, working across both countries as a single international unit.
Dutch precisionHow we plan, build and document. Down to the detail, no surprises.
South African gritHow we show up. Hands-on and personal, until it works.
Every client gets the best of both, in South Africa and in the Netherlands.
About Duo IT Solutions
Enterprise infrastructure and managed continuity
Duo IT Solutions delivers turnkey IT infrastructure management, edge security and business continuity for commercial and manufacturing businesses across South Africa.
We specialise in high-availability Fortinet perimeter security, hybrid virtualisation and robust industrial network segmentation. Our co-managed and fully managed models keep your critical operations resilient, compliant and monitored around the clock.
99.9%Operational uptime delivered at a multi-site manufacturer
Multi-siteSecure WAN, IPsec links and branch connectivity
Zero-trustFortinet perimeter defence and immutable, air-gapped backups
What clients say
On our lead architect's work.
Reviews from our lead architect's independent engagements (2021–2023), shortened for length. Every review: 5 out of 5.
5.0
“Danté helped us transform an office with ~10 clients, no network infrastructure other than a consumer router, a switch and a NAS into a professional workplace: firewall, VLANs, virtual servers, Active Directory, backups and more. Our maintenance window was 4 days. We only needed 2 of them. He provided well structured, clear and detailed documentation. 5* is not enough for him.”
Office network and server build · 2022
5.0
“We had a video call in which Danté went through all the security flaws one by one and patched them. He showed me the before security logs, with 30K+ hacking attempts per day, and the after, in which they completely stopped. All the holes are patched and I can sleep better at night now.”
Server security hardening · 2021
5.0
“It was very quick, easy and efficient to work with Danté. He is definitely an expert with respect to the Fortinet ecosystem, so we didn't waste any time. He knew what he was doing. I would definitely hire him again for any networking related work.”
FortiGate configuration · 2023
5.0
“Without a doubt, top notch engineer and team member! Excellent troubleshooting, planning, documentation and interpersonal skills. Will rehire for any future project needs!”
Wireless and firewall engineering · 2022
5.0
“Got my Windows domain back working and healthy. It was a train wreck because of restored and relocated domain controllers. Very flexible with my schedule.”
Active Directory recovery · 2022
5.0
“Danté was extremely attentive to the IT issue we had and solved it so quickly. We would highly recommend him!”
Microsoft 365 and Azure support · 2022
5.0
“Straightforward, no-nonsense and great communication. Loved working with Danté. Already hired for another job.”
Network troubleshooting · 2021
5.0
“Danté helped us transform an office with ~10 clients, no network infrastructure other than a consumer router, a switch and a NAS into a professional workplace: firewall, VLANs, virtual servers, Active Directory, backups and more. Our maintenance window was 4 days. We only needed 2 of them. He provided well structured, clear and detailed documentation. 5* is not enough for him.”
Office network and server build · 2022
5.0
“We had a video call in which Danté went through all the security flaws one by one and patched them. He showed me the before security logs, with 30K+ hacking attempts per day, and the after, in which they completely stopped. All the holes are patched and I can sleep better at night now.”
Server security hardening · 2021
5.0
“It was very quick, easy and efficient to work with Danté. He is definitely an expert with respect to the Fortinet ecosystem, so we didn't waste any time. He knew what he was doing. I would definitely hire him again for any networking related work.”
FortiGate configuration · 2023
5.0
“Without a doubt, top notch engineer and team member! Excellent troubleshooting, planning, documentation and interpersonal skills. Will rehire for any future project needs!”
Wireless and firewall engineering · 2022
5.0
“Got my Windows domain back working and healthy. It was a train wreck because of restored and relocated domain controllers. Very flexible with my schedule.”
Active Directory recovery · 2022
5.0
“Danté was extremely attentive to the IT issue we had and solved it so quickly. We would highly recommend him!”
Microsoft 365 and Azure support · 2022
5.0
“Straightforward, no-nonsense and great communication. Loved working with Danté. Already hired for another job.”
Network troubleshooting · 2021
Who it's for
Does this sound familiar?
We love working with organisations where IT simply has to work. Pick what sounds most like you.
Your situation
Your in-house IT person is buried in daily requests. Security, cloud and firewalls fall behind, and holidays are out of the question.
What we do
We become their senior backbone. They keep the day-to-day, we take the heavy lifting, with our 24/7 platform alongside.
What you get
An IT person with room to breathe again, and an environment that's finally secure.
“Your IT person handles today. We handle what keeps you up at night.”
Your situation
Production, warehouses or remote branches. When the network goes down, everything stops. Cameras, time clocks and machines all depend on it.
What we do
We tidy the server cabinets, separate office and production, and connect your sites through one secure network.
What you get
A business that simply runs, at every site.
“Downtime costs you production. We make it boring.”
Your situation
You're growing fast or expanding into Europe. Microsoft 365, Azure and security need to keep up, ideally with one team on both continents.
What we do
We set up cloud, identity and security so every new colleague can work securely from day one.
What you get
Growth without IT headaches, in your language.
“New hire? Working securely from their very first day.”
Your situation
Your team is stuck on a complex firewall or cloud issue, and your client is waiting.
What we do
We lend you our expertise and extra hands, white-label and under NDA: for your clients' projects or to improve your own operations.
What you get
We guarantee to get you to the finish line. No task is too complex for us to solve, thanks to our senior experience with escalations.
“Your name on the work. Our seniors behind it.”
For the CEO
No surprises, one accountable partner. Sleep soundly, without waking up to downtime or ransomware.
For the CFO
Predictable monthly costs, senior expertise without a senior salary.
For your IT lead
Senior backup that strengthens you, never replaces you. No calls at 2 AM.
With us you're not a number in a queue. We know your environment, your people and what's at stake for you. And we keep learning, always looking for ways to improve and optimise your IT.
The right person on the line
No call centre and no endless transfers. You speak to the right person, someone who knows your site.
Bespoke, never a template
We start with an audit and build from there. What works, stays. What doesn't, we fix.
Limited intake
We deliberately take on a limited number of new clients at a time, so everyone gets the attention they deserve.
We come in, we do it, and it stays simple.
Cases
The work speaks for itself.
Two ways we work: as an organisation's dedicated IT partner, and as extra senior hands for other IT companies.
BeforeAfterIndustrial · Co-managed
CFW Fans
From a chaotic server room to a factory that simply runs.
Industrial fan manufacturer since 1966. Three sites on two continents, now one secure network.
99.9%uptime
250+staff
3sites
Partnership · White-label
For MSPs and IT companies
Expertise and extra hands for other IT companies.
We implement solutions for your clients or improve your own operations. At cost or on retainer, worldwide, assessed per need.
NDAwhite-label for your client
Retaineror billed at cost
Globalassessed per need
Our standard
One standard. Fewer surprises.
Every client moves onto the same proven setup through a structured pipeline. That isn't a limitation. It's exactly why it stays simple: fewer surprises, faster help and predictable costs.
Identity and workplaceOne secure login (MFA + SSO), mail and files
Microsoft 365 & Entra ID / Google Workspace
DevicesEvery laptop and server updated, protected and backed up
Duo RMM, built in-house · ESET · OneDrive backup
Front doorAttackers out, sites securely linked, always-on internet with failover
FortiGate · SD-WAN · ZTNA/IPsec VPN · WebFilter
RecoveryBackups that come back, tested
Veeam or direct-to-cloud · immutable
24/7 NOC watches every layer
For those who want the detail: three proven setups.
Streamlined local infrastructure
Reliable local compute, central cloud identity and simple network management.
VirtualisationMicrosoft Hyper-V
PerimeterFortinet FortiGate zero-trust edge
Network & CCTVUniFi network & enterprise CCTV
Storage & backupSynology, Veeam or direct-to-cloud (local + off-site)
Workplace & mailMicrosoft 365 & ESET
TelephonyCloud 3CX & Yealink
High-availability hybrid environments
For heavy load with no single points of failure, hybrid cloud and strict compliance such as POPIA and Joint Standard 2.
AvailabilityHyper-V failover clusters
Redundant edgeFortiGate HA & IPS
Hybrid cloudAzure & Entra ID zero-trust
Ransomware shieldAir-gapped immutable Veeam
Core switchingCisco / UniFi Enterprise
Telephony3CX with SIP trunks and QoS
Scalable enterprise environments
Shaped around your needs and scale. The same foundation as mid-market, with custom design wherever your organisation calls for it.
Virtualisation & cloudServer virtualisation combined with a cloud presence
PerimeterFortinet HA and the wider Fortinet portfolio
Backup at scaleVeeam with enterprise storage
Enterprise switchingRedundant core and distribution
IdentityEntra ID or Google Workspace, zero-trust
Telephony3CX across all your sites
Already have an environment? No problem.
We take over existing hardware with no forced replacement, including VMware, Linux, Cisco, HP/Aruba, Dell and third-party firewalls. Then we bring you to our standard in a structured pipeline, without disrupting your work. Legacy systems may take longer, and that's fine: one standard means less overhead, and lower costs for you.
Within 90 days, these are always in place:
FortiGate firewall
ESET antivirus and spam filter
Onboarding onto our RMM platform
Everything else, we decide case by case.
Frequently asked questions
Short and clear.
Question not listed? Feel free to email us.
What does Duo IT Solutions do?
Duo IT Solutions is an IT partner with one team in Cape Town and the Utrecht region in the Netherlands. We manage, secure and monitor the entire IT of organisations of any size and complexity, with senior expertise and 24/7 monitoring.
Does POPIA apply to my business?
Almost certainly. POPIA applies to any business that processes personal information about clients, suppliers or staff, whatever its size. It requires appropriate security measures, and a security breach must be reported to the Information Regulator, as soon as reasonably possible, through its eServices portal. A 30-minute POPIA check tells you where you stand.
We supply banks and insurers, or sell to Europe. What will they ask?
More and more about your security. Since 1 June 2025, Joint Standard 2 requires financial institutions to set out security responsibilities in their contracts with suppliers. European customers under NIS2 must check their suppliers too, including suppliers in South Africa. Working from Cape Town and Utrecht as one team, we know what both will ask and help you answer it.
Can our people use ChatGPT or other AI tools?
Yes, as long as it's done safely. We set up one business AI tool tied to your company login, on terms where your data isn't used to train models. Free AI tools and personal accounts are blocked at the FortiGate firewall, and files with client or staff data are stopped before they leave the network.
Can you limit social media and streaming at work?
Yes. With web filtering on a next-generation firewall you decide per category what's allowed: business apps always, with priority; streaming and social media closed or only at break time; gambling and harmful sites never. We set it up transparently and in line with POPIA, and you get a clear overview every month.
What is co-managed IT?
Your own IT person keeps handling the day-to-day. We provide the senior expertise, the 24/7 platform and the escalation for security, cloud and network. Your IT person gets backup, and your company isn't exposed when they're on leave.
Can you take over our existing IT?
Yes. We take over existing hardware and networks with no forced replacement, including VMware, Linux, Cisco, HP/Aruba and Dell. Then we bring you to our proven standard in a structured pipeline, without disrupting your work. Within 90 days, a FortiGate firewall, ESET antivirus and spam filtering and onboarding onto our RMM platform are always in place. Legacy systems may take longer.
Do you offer a free security audit?
Yes. As part of our comprehensive security and network audit, and with your permission, we connect a passive FortiGate sensor to your network and analyse all traffic for seven days. It runs in monitor mode, so there is zero downtime and zero obligation. You get a report on internal threats, external exposure, incoming attacks and unfiltered content such as adult content, torrenting and crypto-mining.
Do you set up MFA and single sign-on?
Yes. We enforce MFA on every Microsoft 365 account and connect that same login to your remote-worker VPN and your other company cloud apps. Everyone uses single sign-on: one secure login for everything, fewer passwords and maximum security.
How fast do you respond to an outage?
For a critical outage (P1) we respond within 15 minutes. Our Network Operations Centre monitors your environment 24/7, so we're often already on it before you notice.
Can you take care of our phones too?
Yes. We deliver business telephony with 3CX in the cloud, with Yealink desk phones or the app on laptop and smartphone. Lines run through established South African carriers. Because we also manage your network and firewall, calls get priority and you have one point of contact when something isn't working.
What does it cost?
A predictable monthly fee, matched to your environment. After the audit you get a proposal with a fixed scope, with no surprises afterwards.
IT audit
Book your no-obligation IT audit.
Whether you want to tidy up scattered IT, secure your network or bring everything under 24/7 oversight, we'd be glad to talk it through.
01
Introduction and POPIA check, 30 minutes
We hear what's going on and how we can help.
02
An audit of your environment
On site or remote. Want the full picture? With your permission, we monitor your network for 7 days with a passive FortiGate sensor, free and with zero downtime. You get a clear report, whatever you decide.
03
A bespoke proposal
Predictable monthly costs, a clear point of contact and a start date.
We take on a limited number of new clients at a time. Request your audit early.