Good instinct. Yes, that email was really from us.

You got a message from someone at @getsecurezaidi.com, and instead of clicking anything you came to check the domain first. Honestly? That is the exact habit we spend our days teaching. Well done.

A sending domain with no website is one of the oldest tells in the phishing playbook. It would be a poor look on a security consultancy. So: here is the website.

This domain does one job — it carries our outbound business email. No products, no logins, no newsletter popup lying in wait. Everything real about the company lives at securezaidi.com.

SecureZaidi is a cybersecurity, vCISO and GRC consultancy in Westlands, Nairobi. We help small and medium businesses across Kenya and East Africa get their security and Data Protection Act obligations in order — usually before somebody makes them.

See the real site Privacy notice

The bit you actually came for

We write to organisations at their published contact address — the one in your public business listing. We hold no personal details about the person who reads it.

Every message carries an unsubscribe link, and you can always just reply "unsubscribe". We will take the hint the first time. How we handle data is set out in our privacy notice, or write to privacy@securezaidi.com.