Cyber Exposure Validation · Namibia
Ready for BID-30 and PSD-12 testing.
BID-30 takes effect on 19 December 2026, and the PSD-12 grace period ends on 3 January 2027. Both call for annual penetration tests, retesting after change and validated remediation. PSD-12 adds continuous vulnerability scanning.
What your regulator asks for
Where autonomous testing fits.
Your institution decides how it meets each requirement. Cyber exposure validation with autonomous penetration testing supplies frequent, dated evidence of what was tested, what was found and what was fixed.
| Source | What it asks | How autonomous testing helps |
|---|---|---|
| BID-30 10.5; PSD-12 11.5.2 | Critical systems penetration tested at least once a year | An annual subscription allows unlimited tests, so the annual test is the floor, not the ceiling |
| BID-30 10.8 | Testing repeated after material changes to systems or the network | Rerun tests as soon as a change goes live |
| BID-30 10.6 | Vulnerabilities prioritised, fixed and validated as closed | Fix verification gives dated evidence for each finding |
| PSD-12 11.13.1; BID-30 10.7 | Internal and external environments scanned continuously | Scheduled attack-path tests add proof of exploitability to your scanning |
Sources: BID-30 (Government Gazette 8954); PSD-12 (Government Gazette 8968). This page is a summary, not legal advice.
Who it's for
Built for Namibia's regulated institutions.
Banking institutions supervised under BID-30, and payment service providers and system participants covered by PSD-12.
Two ways to work with us
Managed service or your own team.
Managed service
We run it. You get the answers.
For institutions without an in-house offensive security team. SecuriCentrix runs the tests, triages every result and stays with you until each fix is verified.
For your own team
Your team runs it. We back them up.
For institutions with their own security team. We supply the NodeZero licence and support your people with onboarding, training and expert review.
The benefits
Machine speed, human accountability.
Continuous, not annual
Test monthly, after every material change, or on demand. NodeZero is licensed for unlimited pentests, so testing follows your change calendar, not your budget cycle.
Proof, not theory
Move from theoretical vulnerabilities to proven attack paths. NodeZero chains weaknesses together the way an attacker would and safely exploits them, so you see what could actually be reached.
Tests the way attackers work
Attackers don't hack in, they log in. Tests run with or without credentials and expose weak passwords, exposed data, misconfigurations and weak policies, not just missing patches.
Find, fix, verify
Once a fix is in, a quick verification test confirms the attack path is closed. Closure is proven, not assumed.
Safe by design
No agents to install. Internal tests run from a host set up in minutes, and every engagement starts with agreed scope, written authorisation and safe defaults.
Evidence your board and regulator can use
Dated reports show what was tested, what was found, what was fixed and when the fix was verified.
Platform capabilities as described by Horizon3.ai on its NodeZero platform page.
Autonomous testing complements, and does not replace, expert-led manual penetration testing. Where business logic, authorisation or payment-flow testing is needed, SecuriCentrix delivers scoped manual web, API and mobile application testing. See our testing services.
Next step
Start with a scoped proof of value.
We agree one environment, get written authorisation and run NodeZero against it. You see real attack paths in your own network before you decide anything.
- One agreed environment and test window
- Written authorisation and safe defaults before anything runs
- A walk-through of the attack paths found and what to fix first
- A clear recommendation: managed service, licence for your team, or neither
Talk to us about autonomous testing
Tell us about your environment and how you'd like to run testing. A specialist will reply within one working day.
You don't need to tick the box to send an enquiry. SecuriCentrix Ltd uses your details to respond to your enquiry and, only if you tick the box, to send occasional marketing emails. See our Privacy Policy.
Other markets