Nazline Mwita - Cybersecurity & Assurance Lead
CO-FOUNDER & LEAD

Nazline Mwita — Cybersecurity Assurance Lead & Data Protection Auditor in Kenya

Co-Founder & Cybersecurity Assurance Lead
Co-founding partner alongside Harrison Ndeke · Building secure AI-powered websites, automations & resilient workflows.
Nairobi / Thika, Kenya
Authorized Security Assessments B.S. Computer Science Responsible Disclosure
Explore Entry Offer Book Consultation
Assurance Console (Interactive v2.0)

Nazline Mwita: Security Assurance & Advisory Console

Working Positioning: "We help growing organisations build secure AI-powered websites, automations and digital workflows, then document, test and hand them over responsibly."

Type help to explore services, audit methods, and professional background.

client@assurance:~$

PRACTITIONER OVERVIEW Assurance Leadership & Operating Model

Practitioner
Nazline Mwita
Consulting Role
Co-Founder & Cybersecurity Assurance Lead
Founding Partner
Harrison Ndeke (AI & Digital Systems Lead)
Assessment Focus
Authorized web and API security assessments
Operating Rule
Clarity before branding · Proof before promotion

Nazline Mwita is a Nairobi-based Cybersecurity Assurance Lead and Co-Founder at HarLyn Digital Partners specializing in data protection site audits, secure API and workflow audits, machine learning network intrusion detection (NIDS), and defensive architecture for African enterprises.

I lead cybersecurity and technical assurance at HarLyn Digital Partners.
I help growing businesses in Kenya build secure AI websites, automations and workflows.
I test, document and hand over responsibly, with clear proof, not fear.

Core Assurance Domains

Authorised Security Audits

Scoped web application, API, and cloud configuration assessments conducted under written rules of engagement.

Automation & Data-Flow Hygiene

Reviewing webhook endpoints, credential storage, and least-privilege tool execution for n8n and autonomous agents.

Evidence-Led Threat Analysis

Human-verified vulnerability triage and realistic severity rankings that separate real exploit paths from vanity alerts.

Governance & Responsible Handover

Clear remediation roadmaps, data protection audit findings with fixes, and comprehensive operational documentation.

View Full Practitioner Profile & Bio →

CORE SKILLS Professional Roles & Certification

CORE SKILLS

  1. Network and System Security
  2. Threat Detection and Forensics
  3. Data Protection and Access Control
  4. Governance, Awareness and Recovery

PROFESSIONAL ROLES

These are the 4 professional roles I work in.

Cyber Security Consultant

I protect online systems and networks, and help plan and run security strategies.

Information Security Analyst

I plan, monitor and upgrade security measures, and assess risks before they become breaches.

Security Management Specialist

I assess security and design the systems and procedures that keep organisations safe.

Penetration Tester

I test defences by simulating real cyberattacks, then report the gaps.

Certification

CompTIA Security+ (SY0-701), Certified November 2026
Verify: https://www.credly.com/earner/earned/badge/0ec71c42-3131-4929-9305-bc8cee804d8c

CONSULTING PRACTICE Services & The Entry Offer

We help SMEs, startups, and established teams replace manual bottlenecks with reliable workflows.
Zero exposed customer data, leaked API keys, or operational risk.

RECOMMENDED FIRST ENGAGEMENT

Secure Digital Workflow Assessment

Fixed Scope · 2 to 3 Weeks Delivery

A fixed-scope discovery engagement mapping one critical workflow, public web surface, or internal API.
Delivers verified security findings, high-ROI automation wins, and a 30/60/90-day actionable roadmap.

Current-State Architecture Map End-to-end trace of your data flows, external integrations, and sensitive data touchpoints.
Authorised Security Observations Human-verified risk findings on configurations, permissions, and exposed surfaces within agreed scope.
Automation & AI Feasibility Matrix Prioritised evaluation of automation opportunities ranked by business value, operational risk, and implementation effort.
Actionable Remediation & Build Roadmap Concrete 30/60/90-day plan with clear stop-points, owner assignments, and safe implementation paths.
Request Scoping Call Zero obligation to proceed with follow-on builds. Clear decisions before code.

The Firm's Four Service Pillars

01

Secure AI-Powered Websites

Modern business and service websites built for speed, conversion, and durability. Includes guided search assistants, lead capture integrations, and technical SEO/AEO foundations.

Led by Harrison · Audited by Nazline
02

AI & Workflow Automation

Robust n8n workflow architecture, multi-step integrations, and RAG knowledge systems that eliminate manual data re-entry while maintaining strict operational audit trails.

Led by Harrison · Audited by Nazline
03

Authorised Security Services

Scoped website, web application, and API assessments with formal rules of engagement. Practical remediation reports that explain risks in plain business language.

Full service details → Led by Nazline
04

Secure Automation Reviews

Data-flow, webhook, and permission reviews for automated systems. Setting tool-execution boundaries, credential hygiene, and human approval checkpoints for AI agents.

Full service details → Led by Nazline

Additional Focus Areas

AI Security Kenya

Product-level AI security: model access control, prompt-injection exposure, data leakage, and vendor API key hygiene.

Full service details → Led by Nazline

RAG Security

Vector database access control, source-freshness and provenance, indirect prompt injection, and RBAC metadata filtering.

Full service details → Led by Nazline

AI Agent Security

Tool-call permission boundaries, human-approval gates, trajectory auditing, and sandboxing for autonomous AI agents.

Full service details → Led by Nazline

Security Audits Kenya

Infrastructure and cloud configuration review, security architecture review, and process/policy audits.

Full service details → Led by Nazline

Data Protection Site Audit

Technical audit of a website's data handling — forms, cookies and consent, encryption, access controls, third-party sharing and breach logs — with findings and a fix list. Technical checks only, not legal advice.

Full service details → Led by Nazline

Cybersecurity Consultant Kenya

Ongoing fractional security advisory — roadmap planning, policy, vendor risk review, and incident-readiness.

Full service details → Led by Nazline
Browse Full Services & Methodology Catalog →

ETHICAL STANDARDS Responsible Security Boundary & Charter

Cybersecurity capability is valuable only when governed by discipline and ethics.
We hold ourselves to clear, published boundaries:

STANDARD PROTOCOL

Permission Before Testing

Active security testing is conducted strictly under written client authorization.
Defines exact targets, methodology, testing windows, and emergency stop conditions.

STRICTLY PROHIBITED

No Unsolicited Scans

We never perform unsolicited active scanning against arbitrary websites.
No automated scanner dumps to manufacture panic or pressure prospective clients.

STANDARD PROTOCOL

Human Evidence Verification

Every finding reported is manually reproduced and evaluated for real business impact.
We measure trust and clarity rather than inflated vanity metrics.

STANDARD PROTOCOL

Data Minimization & Privacy

We never extract, download, or retain client data to “prove” impact.
Evidence is handled with least privilege and securely deleted per policy.

Compliant with Kenyan Data Protection Act & International Responsible Disclosure Standards

VERIFIED PROOF Technical Proof & Active Deliveries

AI Integrated Smart Packet Analyzer live capture dashboard with threat timeline, protocol distribution, and actionable alerts
Research & Implementation Final Year Cybersecurity Project

AI Integrated Smart Packet Analyzer

Real-time ML Network Intrusion Detection System (NIDS) built to analyze live network flows.
Classifies malicious traffic and provides explainable attribution behind every prediction.

  • Evaluated on 82,332 held-out UNSW-NB15 benchmark network flows
  • Binary attack detection and multi-class threat classification with XGBoost
  • Real-time packet inspection via NFStream and Scapy with explainable prediction scoring
  • SOC-style triage dashboard with exportable incident logs and PDF/CSV compliance reports
PythonXGBoostStreamlitNFStreamScapyThreat Intelligence
Read the Full Case Study → View Research & Code on GitHub
Munar Nairobi luxury leather storefront with Atelier Concierge AI luxury styling assistant interface
Active Client Delivery Commercial Delivery Record

Munar: Website Audit, Optimization & Deployment Handover

Client delivery with Harrison Ndeke for Munar (munar-ke.vercel.app).
Managed security baseline, UX clarity, technical SEO foundations, and Vercel deployment.

  • Established baseline audit across performance, mobile responsiveness, and headers
  • Enforced security boundary: scoped reviews without intrusive unauthorized scanning
  • Implemented structured data, canonical URLs, and clean analytics without tracking leaks
  • Delivered client access, documentation, and maintainable handover record
Client DiscoverySecurity BaselineTechnical SEOUX / Mobile AuditingVercel
Read the Full Case Study → View Munar Deployment
HarLyn Internal Product · Built & Tested Zero-Trust Data Protection Engine

TrustCapsule: Zero-Trust Data Protection & Audit Trails

Internal data escrow product built with Harrison Ndeke at HarLyn Digital Partners.
Wraps sensitive files into self-destructing, watermarked, tamper-proof capsules.

  • AES-256-GCM encryption at rest, forced row-level security, zero permissive policies
  • Append-only HMAC-SHA256 audit chain — even the service role cannot rewrite history
  • 256-bit recipient access tokens, never logged, only stored as a hash
  • Audit-trail reports generated from real audit-chain data
Next.js 15Supabase / Postgres RLSAES-256-GCMChrome ExtensionWordPress Integration
Read the Full Case Study →
In Active Development AI-Assisted Security Monitoring Platform

HarLyn Sentinel: AI-Assisted Security Monitoring Platform

Managed threat-detection platform built with Harrison Ndeke for teams without an in-house SOC.
Combines Wazuh telemetry, AI-enriched alerting, and automated n8n response workflows.

  • Wazuh-powered log analysis, file integrity monitoring, and vulnerability scanning
  • AI Security Analyst converts raw alerts into plain-English risk context and attack-chain mapping
  • Red-team / blue-team simulation lab for validating detection rules before customer rollout
  • Separate SOC console and client executive dashboard with monthly compliance reporting
WazuhNext.js 15n8nMulti-Tenant Architecture
Read the Architecture Record →
View All Technical Proof & Case Studies → See what's in development →

PUBLICATIONS & CASE STUDIES Technical Field Notes & Research

Evidence-led incident walkthroughs and authorized threat triage field notes.
Engineering blueprints for high-growth African enterprises.

View All Field Notes & Research →

PRACTICE Learning & Security Work

CompTIA Security+ ce Certified badge

CompTIA

CompTIA Security+ ce Certified (SY0-701)

Globally recognized certification validating core knowledge in threat management, cryptography, identity & access management, security operations, and vulnerability assessment.

Zetech University

B.S. in Computer Science

Rigorous focus on computer systems, algorithm design, software engineering architectures, database security, and networking protocols.

How Security Work Is Done

Authorized, Evidence-Led Assessments

Written scope, OWASP-aligned checks, reproducible findings, and a prioritized fix list.

Two Founders, One Practice

Nazline secures it. Harrison builds and automates it.
Nazline Mwita, Cybersecurity Assurance Lead
  • Threat modeling & security baselines
  • Web and API vulnerability assessment
  • Authorised testing methodology & scoping
  • Evidence, severity rankings & remediation
  • Data privacy & incident response fundamentals
Harrison Ndeke, AI & Web Systems Lead
  • APIs, webhooks & data-flow architecture
  • n8n workflow design & error handling
  • AI agents, tools & RAG systems
  • AI-powered website systems & AEO
  • Observability & client handovers
Together, they deliver secure AI-powered websites, automations and resilient workflows.

Frequently Asked Questions

Who is Nazline Mwita?

Nazline Mwita is a Cybersecurity Assurance Lead and Co-Founder of HarLyn Digital Partners, based in Nairobi, Kenya. She advises African enterprises on data protection site audits, authorized web and API security assessments, and secure AI and automation architecture.

What does a Cybersecurity Assurance Lead do?

A Cybersecurity Assurance Lead verifies that an organisation's systems, data flows, and automated workflows actually behave as claimed. Nazline Mwita's assurance work covers authorized vulnerability assessment against OWASP Top 10 and API Security Top 10, data protection site audits, permission and credential audits for AI agents, and evidence-backed remediation roadmaps.

What is a data protection site audit?

A data protection site audit is a technical check of how a website handles visitor and customer data: forms, cookies and consent banners, encryption, access controls, third-party sharing and breach logs. You receive findings and a fix list. This is not legal advice; legal questions belong to an advocate.

Does Nazline Mwita perform unauthorized security testing?

No. All security assessments are conducted strictly under written rules of engagement with documented scope and client authorization. The practice operates on a permission-before-testing standard and does not conduct intrusive or unauthorized scanning of systems outside an agreed scope.

How do I start an engagement with Nazline Mwita?

Most engagements begin with the Secure Digital Workflow Assessment, a fixed-scope two-to-three-week discovery engagement. It maps one critical workflow, public web surface, or internal API, produces authorized security findings, ranks automation opportunities, and delivers a 30/60/90-day remediation roadmap with no obligation to proceed to follow-on build work.

TALK TO NAZLINE

Not sure where to start? Say hello.

WhatsApp HarLyn: +254 112 855069

Free 15 minute intro chat. No pressure, no obligation.

Or send a message below. I reply personally.

ENGAGEMENT INTAKE Scoped Consultation & Assessment Intake

Interested in our Secure Digital Workflow Assessment, an authorized web/API review, or secure automation design? Submit your project context below. All inquiries are held in strict confidence.

WhatsApp