Bitara

IT services in South Africa and worldwide

Technology that keeps business moving.

Security, servers and cloud, software and support for businesses in South Africa and further afield. You deal with one engineer from the first call to the last fix.

  • Security first
  • Zero trust
  • POPIA-aware
  • No trackers
31 yearsin business, since 1995
Next-daychanges to production
33 servicesone point of contact

What we do

IT services, end to end

From the first assessment to the hardware, the migration and the support afterwards.

Why Bitara

In business since 1995, and changes live the next day

31 years in business, since 1995

In business since 1995, with hands-on work on networks, servers, security and software from the early internet to today's cloud and AI.

Next-day changes to production

All development and infrastructure are handled by one dedicated engineer, so there are no hand-offs between teams. A change requested today can be in production the next day, once change-control documentation and testing are complete.

One point of contact

The person you speak to is the person doing the work, from the first conversation to support afterwards.

AI without giving your data away

Many AI tools send your documents and recordings to someone else's servers, where they may be kept or used to train other models. We build AI software that runs on infrastructure you choose, including your own or South African servers, so your information stays in your control and within POPIA.

Secure AI software development

Our security approach

Zero trust: never trust, always verify

The old model trusted anything inside the office network. Today staff work from home, data lives in the cloud and one stolen password can open everything. Zero trust checks every request, gives only the access needed, and assumes an attacker may already be inside, so a single mistake stays small.

01

Verify explicitly

Every sign-in is checked, every time, wherever it comes from.

  • Multi-factor sign-in for everyone, administrators included
  • Conditional Access weighs the person, device, location and risk
  • Only managed, encrypted, up-to-date devices reach company data
02

Least privilege

People get the access their job needs, and no more.

  • Access by role, reviewed regularly
  • Administrator rights granted just in time, approved and recorded (PAM)
  • Leavers lose access the same day
03

Assume breach

Plan as if an attacker is already inside, so one mistake stays small.

  • Networks segmented, so one infected device cannot reach everything
  • Data encrypted in transit and at rest
  • Activity logged and watched, and backups tested by restoring them

How we work

Assess, plan, deliver, support

  1. 1

    Assess

    We look at what you have and what you need.

  2. 2

    Plan

    A clear plan, with costs, risks and timelines.

  3. 3

    Deliver

    The work done carefully, around your business hours.

  4. 4

    Support

    We stay on to keep it running and improving.

One integrated platform

Monitoring, helpdesk and assets, working as one

When something fails, the monitoring raises the alert, the helpdesk opens the ticket with the affected asset attached, the right technician is assigned, it is escalated if the SLA is at risk, and the fix becomes a knowledge article. Every step is recorded.

From alert to answer
  1. Monitoring
  2. Alert
  3. Helpdesk ticket
  4. Technician
  5. Resolution
  6. Knowledge article
  • Escalation, if the SLA is at risk
  • User satisfaction survey

How this site is run

Built the way we build for you

This site runs on a server we set up and hardened ourselves, the same way we would set up yours. The figures below come straight from that server.

bitara@www ~ ./posture --report
server
hardened Linux, CIS Level 1 92% (from 76%)
crypto
FIPS-approved system policy, AES-GCM only
transport
TLS 1.2 / 1.3, HSTS, SSH with FIPS ciphers
headers
strict CSP, no framing, no sniffing
privacy
0 third-party requests, no trackers, POPIA-aware
database
TLS-only, audited (pgAudit), checksummed
defence
fail2ban, file-integrity monitoring, daily security patches
delivery
automated tests, then push-to-deploy with health checks

Let's talk about your IT

Tell us what you need. You will hear back from the person who will do the work.

Contact us