Duo IT
Language and country: ENZA
Nederland · duo-it.nlNederlandsEnglish
South Africa · Suid-Afrika · duo-it.co.zaEnglishAfrikaans
Book an IT audit
Bespoke managed IT · South Africa & the Netherlands

We do IT.
Simply.

Duo IT Solutions manages, secures and monitors your entire IT, no matter the size or complexity of your organisation. Senior expertise, 24/7 monitoring and POPIA readiness, from Cape Town to Amsterdam. No fuss and no vendor lock-in.

Our golden standard

What we build on by default, because it's proven. Using other vendors? No problem: we adopt and work with any vendor you already have.

What we do

Everything your IT needs. One partner.

Pick an area to see what it means for you. Or let us do all of it: that's where we're at our best.

Problems fixed before you notice them.

All your workstations, servers and switches are continuously connected to our Network Operations Centre. If something goes wrong, we're already on it.

  • Proactive monitoring, 24/7
  • Updates and patches on schedule
  • Vulnerabilities found automatically
  • 15-minute response on critical outages
24/7 NOCRMMESETSNMP
15 minP1 response
POPIA · Protection of Personal Information Act

POPIA already applies to you. Would you survive a breach report?

If your business holds client or staff details, POPIA applies, whatever your size. Since April 2025, a security breach must be reported to the Information Regulator through its eServices portal, and everyone affected must be told. Duo IT Solutions makes businesses of any size POPIA-ready, without you having to hire a security team.

The Information Regulator Expects appropriate security, and a report after any breach
Your business Must show your IT is secure and recoverable
Duo IT Security, backups and 24/7 monitoring, documented in reports

What POPIA asks, in plain language

A front door that stays shut

POPIA asks
Appropriate, reasonable technical measures to protect personal information (section 19)
What it means for you
Nobody gets in unnoticed, not through a remote worker and not through another branch.
What we do
We install an enterprise firewall that blocks suspicious traffic and links your sites with encryption.

FortiGate clusters · ZTNA · IPS · encrypted site-to-site tunnels

Only the right people get in

POPIA asks
Prevent unauthorised access to personal information (section 19)
What it means for you
A stolen password isn't enough to sign in, and every laptop is up to date.
What we do
We enforce two-step sign-in, link that login to your VPN and cloud apps with single sign-on, decide who can access what and install updates automatically.

Microsoft 365 · Entra ID · MFA · SSO · conditional access · RMM patch management · ESET

After an attack, you're back to work fast

POPIA asks
Prevent loss of, or damage to, personal information (section 19)
What it means for you
Even if ransomware strikes, your data is safe and you know how long recovery takes.
What we do
We deploy right-sized resilience, from hybrid Veeam setups to appliance-free cloud-to-cloud backups. Always immutable, kept off the network, with verified restore tests.

Hybrid Veeam & cloud-to-cloud · immutable storage · tested RTO/RPO

Someone is watching, day and night

POPIA asks
Report a security compromise as soon as reasonably possible (section 22)
What it means for you
A breach is spotted straight away, contained and reported correctly.
What we do
Our 24/7 Network Operations Centre watches everything and helps you file the report on the Regulator's portal.

24/7 NOC · agent and SNMP telemetry · incident reporting

POPIA in three numbers

R10 million

Maximum administrative fine under POPIA. Source: POPIA s109

R5 million

What the Regulator fined the Department of Justice after its antivirus and security licences lapsed. Source: SAnews

R17 million

Average ransomware recovery cost in South Africa, before any ransom. Source: Sophos 2026

Supplying banks, insurers or financial services providers?

Since 1 June 2025, Joint Standard 2 requires them to set out security responsibilities in their contracts with suppliers. Expect a security questionnaire. Source: Michalsons

Selling to Europe?

European customers under NIS2 must check their suppliers, including suppliers in South Africa. Our Dutch side knows exactly what they will ask, and our Cape Town team gets you there.

Preview of the POPIA Reality Check PDF · 1 page
Free download · 5 minutes

POPIA already applies to you. Every breach must be reported. Would you pass?

The POPIA Reality Check: the 7 questions you will face from the Regulator and your customers, the numbers every director should know and a score that tells you honestly where you stand.

  • Facts from the Information Regulator, Sophos and POPIA itself
  • 7 questions with a scorecard
  • What a breach costs, in rand

We never share your details with anyone, and we process them in line with POPIA.

No in-house security department needed.

We deliver the complete, co-managed security POPIA expects, under one predictable monthly fee.

AI & web filtering

AI at work. Without your data walking out the door.

Your people already use AI, often on a free account and often with customer data in it. We roll out AI safely across the company, and your next-generation firewall makes sure only work traffic leaves the network.

77%

of employees who use AI paste company data into chatbots. Source: LayerX 2025

82%

of those pastes happen on a personal account, out of IT's sight. Source: LayerX 2025

26%

of files uploaded to AI tools contain sensitive data. Source: Harmonic Security 2025

What gets through your firewall
  • Business AI assistantTied to your company loginOpenAllowed
  • Free AI chatbot, personal accountOut of IT's sightOpenBlocked
  • Customer file to an AI sitePersonal data leaving the networkOpenStopped
  • Microsoft 365, ERP and phonesThe actual workOpenPriority
  • Streaming and social mediaTime and bandwidthOpenBreak time only
  • Phishing and malware sitesOne click is all it takesOpenBlocked
  • Hidden crypto-miningSilently slows everything downOpenBlocked
  • Gambling, adult content and torrentsA risk to your network and your nameOpenBlocked
Without a filter, everything is open. 5 of the 8 are a risk.With Duo IT, work gets priority and the risks stay out.
How we do it
  1. 01

    One business AI, set up properly

    Together we choose an AI tool on a business contract, so your data isn't used to train models. Everyone signs in with their company account.

  2. 02

    Unapproved AI blocked

    Your FortiGate recognises AI services by name. Anything you haven't approved is closed off, even when someone tries a personal account.

  3. 03

    Data leaks stopped

    Files with customer, staff or financial data are recognised and stopped before they leave the network.

  4. 04

    Work traffic only

    We filter the web by category. Business apps get priority, while streaming and social media are blocked or limited to set break times. Gambling, adult content and other unsafe sites always stay out. So does crypto-mining: hidden code that silently harvests your computers' resources without you knowing, making everything sluggish.

  5. 05

    A monthly overview

    A clear report: which AI tools people tried, what was stopped and where the bandwidth goes. Oversight, not surveillance.

Transparent to your people and set up in line with POPIA, with a clear policy everyone can read.

FortiGate NGFWApplication controlWeb filterDLPSSL inspection
Book an AI and web filter check
Free · Comprehensive security & network audit

Monitor your network for 7 days. Zero downtime. Zero obligation.

With your permission, we connect a passive FortiGate security sensor to your network to analyse traffic flow, identify hidden vulnerabilities and detect unauthorised external connections over seven days.

Because the assessment runs passively in monitor mode, your daily operations and internet connectivity remain 100% uninterrupted. At the end of the week, you receive a clear, executive-ready report detailing your risk exposure, shadow IT usage and actionable compliance fixes.

Request the free audit
  • Internal threatsInfected devices and suspicious traffic inside your network
  • External exposureWhat can be seen and reached from the outside
  • Incoming threatsAttacks and scans knocking on your front door
  • Unfiltered contentAdult content, torrenting, gambling and crypto-mining
How we work

We come in. We do it. Simple.

Four steps from intake to peace of mind. Hover or tap a step to see what you get.

  1. 01

    Audit

    We map your environment and tell you plainly what we find.

    • A clear report, no jargon
    • Risks ranked by urgency
  2. 02

    Onboarding

    We take over your existing setup, with no forced replacement.

    • No interruption to your work
    • Everything documented
  3. 03

    Secure

    Firewalls, backups and access sorted, using proven blueprints.

    • Ransomware-resilient
    • Ready for POPIA
  4. 04

    Manage 24/7

    Monitoring, patching and fast response. You do your work, we do IT.

    • The right person, who knows your setup
    • A quarterly review of your IT
Why Duo

Two cultures. One gold standard.

Duo IT is one company with two identities, Dutch and South African. One team, one standard and one point of contact, working across both countries as a single international unit.

Dutch precisionHow we plan, build and document. Down to the detail, no surprises.
South African gritHow we show up. Hands-on and personal, until it works.

Every client gets the best of both, in South Africa and in the Netherlands.

A 42U server cabinet with Dell servers, built and managed by Duo IT
About Duo IT Solutions

Enterprise infrastructure and managed continuity

Duo IT Solutions delivers turnkey IT infrastructure management, edge security and business continuity for commercial and manufacturing businesses across South Africa.

We specialise in high-availability Fortinet perimeter security, hybrid virtualisation and robust industrial network segmentation. Our co-managed and fully managed models keep your critical operations resilient, compliant and monitored around the clock.

99.9%Operational uptime delivered at a multi-site manufacturer
Multi-siteSecure WAN, IPsec links and branch connectivity
Zero-trustFortinet perimeter defence and immutable, air-gapped backups
What clients say

On our lead architect's work.

Reviews from our lead architect's independent engagements (2021–2023), shortened for length. Every review: 5 out of 5.

“Danté helped us transform an office with ~10 clients, no network infrastructure other than a consumer router, a switch and a NAS into a professional workplace: firewall, VLANs, virtual servers, Active Directory, backups and more. Our maintenance window was 4 days. We only needed 2 of them. He provided well structured, clear and detailed documentation. 5* is not enough for him.”
Office network and server build · 2022
“We had a video call in which Danté went through all the security flaws one by one and patched them. He showed me the before security logs, with 30K+ hacking attempts per day, and the after, in which they completely stopped. All the holes are patched and I can sleep better at night now.”
Server security hardening · 2021
“It was very quick, easy and efficient to work with Danté. He is definitely an expert with respect to the Fortinet ecosystem, so we didn't waste any time. He knew what he was doing. I would definitely hire him again for any networking related work.”
FortiGate configuration · 2023
“Without a doubt, top notch engineer and team member! Excellent troubleshooting, planning, documentation and interpersonal skills. Will rehire for any future project needs!”
Wireless and firewall engineering · 2022
“Got my Windows domain back working and healthy. It was a train wreck because of restored and relocated domain controllers. Very flexible with my schedule.”
Active Directory recovery · 2022
“Danté was extremely attentive to the IT issue we had and solved it so quickly. We would highly recommend him!”
Microsoft 365 and Azure support · 2022
“Straightforward, no-nonsense and great communication. Loved working with Danté. Already hired for another job.”
Network troubleshooting · 2021
Who it's for

Does this sound familiar?

We love working with organisations where IT simply has to work. Pick what sounds most like you.

Your situation

Your in-house IT person is buried in daily requests. Security, cloud and firewalls fall behind, and holidays are out of the question.

What we do

We become their senior backbone. They keep the day-to-day, we take the heavy lifting, with our 24/7 platform alongside.

What you get

An IT person with room to breathe again, and an environment that's finally secure.

“Your IT person handles today. We handle what keeps you up at night.”

For the CEO

No surprises, one accountable partner. Sleep soundly, without waking up to downtime or ransomware.

For the CFO

Predictable monthly costs, senior expertise without a senior salary.

For your IT lead

Senior backup that strengthens you, never replaces you. No calls at 2 AM.

Not quite your situation? No problem. Tell us what's going on, we're happy to think along.
Our approach

Personal. Bespoke. Full attention.

With us you're not a number in a queue. We know your environment, your people and what's at stake for you. And we keep learning, always looking for ways to improve and optimise your IT.

The right person on the line

No call centre and no endless transfers. You speak to the right person, someone who knows your site.

Bespoke, never a template

We start with an audit and build from there. What works, stays. What doesn't, we fix.

Limited intake

We deliberately take on a limited number of new clients at a time, so everyone gets the attention they deserve.

We come in, we do it, and it stays simple.

Cases

The work speaks for itself.

Two ways we work: as an organisation's dedicated IT partner, and as extra senior hands for other IT companies.

Before: servers and cables loose on a workbenchBefore
After: tidy server rack with labelled patch cables and Fortinet firewallsAfter
Industrial · Co-managed
CFW Fans

From a chaotic server room to a factory that simply runs.

Industrial fan manufacturer since 1966. Three sites on two continents, now one secure network.

99.9%uptime
250+staff
3sites
For MSPs and IT companies

Expertise and extra hands for other IT companies.

We implement solutions for your clients or improve your own operations. At cost or on retainer, worldwide, assessed per need.

NDAwhite-label for your client
Retaineror billed at cost
Globalassessed per need
Our standard

One standard. Fewer surprises.

Every client moves onto the same proven setup through a structured pipeline. That isn't a limitation. It's exactly why it stays simple: fewer surprises, faster help and predictable costs.

  1. Identity and workplaceOne secure login (MFA + SSO), mail and files
    Microsoft 365 & Entra ID / Google Workspace
  2. DevicesEvery laptop and server updated, protected and backed up
    Duo RMM, built in-house · ESET · OneDrive backup
  3. Front doorAttackers out, sites securely linked, always-on internet with failover
    FortiGate · SD-WAN · ZTNA/IPsec VPN · WebFilter
  4. RecoveryBackups that come back, tested
    Veeam or direct-to-cloud · immutable
24/7 NOC watches every layer

For those who want the detail: three proven setups.

Streamlined local infrastructure

Reliable local compute, central cloud identity and simple network management.

  • VirtualisationMicrosoft Hyper-V
  • PerimeterFortinet FortiGate zero-trust edge
  • Network & CCTVUniFi network & enterprise CCTV
  • Storage & backupSynology, Veeam or direct-to-cloud (local + off-site)
  • Workplace & mailMicrosoft 365 & ESET
  • TelephonyCloud 3CX & Yealink

Already have an environment? No problem.

We take over existing hardware with no forced replacement, including VMware, Linux, Cisco, HP/Aruba, Dell and third-party firewalls. Then we bring you to our standard in a structured pipeline, without disrupting your work. Legacy systems may take longer, and that's fine: one standard means less overhead, and lower costs for you.

Within 90 days, these are always in place:
  • FortiGate firewall
  • ESET antivirus and spam filter
  • Onboarding onto our RMM platform
Everything else, we decide case by case.
Frequently asked questions

Short and clear.

Question not listed? Feel free to email us.

What does Duo IT Solutions do?

Duo IT Solutions is an IT partner with one team in Cape Town and the Utrecht region in the Netherlands. We manage, secure and monitor the entire IT of organisations of any size and complexity, with senior expertise and 24/7 monitoring.

Does POPIA apply to my business?

Almost certainly. POPIA applies to any business that processes personal information about clients, suppliers or staff, whatever its size. It requires appropriate security measures, and a security breach must be reported to the Information Regulator, as soon as reasonably possible, through its eServices portal. A 30-minute POPIA check tells you where you stand.

We supply banks and insurers, or sell to Europe. What will they ask?

More and more about your security. Since 1 June 2025, Joint Standard 2 requires financial institutions to set out security responsibilities in their contracts with suppliers. European customers under NIS2 must check their suppliers too, including suppliers in South Africa. Working from Cape Town and Utrecht as one team, we know what both will ask and help you answer it.

Can our people use ChatGPT or other AI tools?

Yes, as long as it's done safely. We set up one business AI tool tied to your company login, on terms where your data isn't used to train models. Free AI tools and personal accounts are blocked at the FortiGate firewall, and files with client or staff data are stopped before they leave the network.

Can you limit social media and streaming at work?

Yes. With web filtering on a next-generation firewall you decide per category what's allowed: business apps always, with priority; streaming and social media closed or only at break time; gambling and harmful sites never. We set it up transparently and in line with POPIA, and you get a clear overview every month.

What is co-managed IT?

Your own IT person keeps handling the day-to-day. We provide the senior expertise, the 24/7 platform and the escalation for security, cloud and network. Your IT person gets backup, and your company isn't exposed when they're on leave.

Can you take over our existing IT?

Yes. We take over existing hardware and networks with no forced replacement, including VMware, Linux, Cisco, HP/Aruba and Dell. Then we bring you to our proven standard in a structured pipeline, without disrupting your work. Within 90 days, a FortiGate firewall, ESET antivirus and spam filtering and onboarding onto our RMM platform are always in place. Legacy systems may take longer.

Do you offer a free security audit?

Yes. As part of our comprehensive security and network audit, and with your permission, we connect a passive FortiGate sensor to your network and analyse all traffic for seven days. It runs in monitor mode, so there is zero downtime and zero obligation. You get a report on internal threats, external exposure, incoming attacks and unfiltered content such as adult content, torrenting and crypto-mining.

Do you set up MFA and single sign-on?

Yes. We enforce MFA on every Microsoft 365 account and connect that same login to your remote-worker VPN and your other company cloud apps. Everyone uses single sign-on: one secure login for everything, fewer passwords and maximum security.

How fast do you respond to an outage?

For a critical outage (P1) we respond within 15 minutes. Our Network Operations Centre monitors your environment 24/7, so we're often already on it before you notice.

Can you take care of our phones too?

Yes. We deliver business telephony with 3CX in the cloud, with Yealink desk phones or the app on laptop and smartphone. Lines run through established South African carriers. Because we also manage your network and firewall, calls get priority and you have one point of contact when something isn't working.

What does it cost?

A predictable monthly fee, matched to your environment. After the audit you get a proposal with a fixed scope, with no surprises afterwards.

IT audit

Book your no-obligation IT audit.

Whether you want to tidy up scattered IT, secure your network or bring everything under 24/7 oversight, we'd be glad to talk it through.

  1. 01

    Introduction and POPIA check, 30 minutes

    We hear what's going on and how we can help.

  2. 02

    An audit of your environment

    On site or remote. Want the full picture? With your permission, we monitor your network for 7 days with a passive FortiGate sensor, free and with zero downtime. You get a clear report, whatever you decide.

  3. 03

    A bespoke proposal

    Predictable monthly costs, a clear point of contact and a start date.

We take on a limited number of new clients at a time. Request your audit early.
Duo IT SolutionsCape Town · South Africa
Email us directly
dante@duo-it.co.za
Book the IT audit LinkedIn company page

Active from Cape Town to Amsterdam, for clients of every size.

Already a client? Go to the helpdesk.

Case · CFW Fans

CFW Fans: from a chaotic server room to 99.9% uptime.

Client
Continental Fan Works
Since
1966
Sector
Industrial fans
Model
Co-managed
Sites
Cape Town (HQ) · Johannesburg · Canada
The starting point
  • Servers on workbenches and the concrete floor, in factory dust
  • Unlabelled cabling that kept causing network loops
  • Loose power strips tangled with data cables: a fire risk
  • Unmonitored firewalls and fragmented backups
The result

99.9% uptime, three sites connected as one company, decades of designs protected, and the CEO's full long-term backing.

After: tidy server rack with labelled patch cables and Fortinet firewalls Before: servers and cables loose on a workbench Before After

Drag to compare · tap a photo to enlarge

After: lockable wall cabinets for switches, telecoms and cameras
Lockable wall cabinets with separate zones for factory network, telecoms and cameras, mounted high, away from dust.
What we delivered

Email to the cloud

To Microsoft 365 with zero downtime and mandatory MFA.

Exchange Online · Entra ID

Three sites, one network

Encrypted links. Canada joined ERP and CAD straight away.

FortiGate HA · IPsec · ZTNA

20 critical servers

CAD, ERP and machine control on a redundant cluster.

Hyper-V · Dell PowerEdge · Dell EMC

Factory and office separated

24 switches rebuilt with strict segmentation.

Cisco · VLAN

Wi-Fi and 100+ cameras

Plant-wide coverage, plus biometric time tracking.

UniFi · UniFi NVR

Backups that restore

Air-gapped, with regular restore tests.

Veeam · 24/7 NOC
Something like this for you?
Case · Partner for IT companies

Senior expertise and extra hands for MSPs and IT companies.

Other IT companies bring us in to implement solutions for their clients, or to improve their own operations. Think of it as hiring a senior specialist, but as a business: billed at cost per job or on retainer. We work for clients worldwide and assess every request on its own needs.

Role
An extension of your team
Model
White-label, under NDA
Billing
At cost or on retainer
Reach
Worldwide, per need
Our promise

We guarantee to get you to the finish line. No task is too complex for us to solve, thanks to our senior experience with escalations.

Gaps we fill
  • Firewalls and edge security

    High-availability clusters, zero-trust remote access and site-to-site meshes on Fortinet and SonicWall.

  • Hybrid systems and virtualisation

    Server infrastructure, storage and hypervisors across mixed on-premise environments.

  • Microsoft 365 and Azure at scale

    Security baselines, anti-phishing and access policies rolled out across entire client fleets at once, with automated compliance auditing.

  • Extra hands, when you need them

    Projects, migrations and busy periods, whenever your own team is short on capacity.

All partner names are covered by strict NDAs. Redacted blueprints and sanitised configurations are available on request.

Need extra senior hands?