Genrev Group logoOMNISENTINELGRID

Capability statement · Genrev Group

OmniSentinelGrid

Genrev Group’s customer-scoped cybersecurity platform brings saved estate records, incident investigations, exposure and end-of-life reporting, compliance evidence and rules-based fraud screening into one secured console. The current scope below is separate from the proposed managed services and industry coverage.

Current platform scope · Updated 18 October 2026

Security operations & fraud screening

Customer estates & access

Saved customer profiles and estate-specific memberships, with active-account checks, mandatory authenticator verification and role-based permissions.

  • Customer-scoped records
  • Invitation-only operator accounts
  • Separate administrator, analyst, auditor and viewer roles

SOC & incident investigations

Persisted incident records, assigned owners, controlled status changes and investigation notes with an append-only case history.

  • Case acknowledgement and response evidence
  • Versioned updates to protect concurrent work
  • Reports and exports from saved records

Exposure & end-of-life reporting

Asset and vulnerability registers covering unsupported systems, software and ageing hardware, using recorded support dates and findings.

  • Support-end dates and affected assets
  • Severity, remediation and accountable owners
  • Finding status and remediation due dates

Compliance evidence

Saved control records, framework references and evidence notes for review, with recorded ownership and change history.

  • Framework-linked evidence
  • Reviewed, unreviewed and rejected controls
  • Evidence-led reporting, not certification claims

Secure source intake

Validated JSON imports and estate-bound security-source intake with revocable credentials, source identifiers and receipt-based health indicators.

  • Bounded batches and duplicate handling
  • Recorded receipt and import failures
  • Customer tools require authorised connection

Fraud screening & review

Customer-specific rules score payment, identity/login, procurement and onboarding events when saved, returning allow, review or block screening decisions.

  • Configurable rules and matched-rule explanations
  • Investigation queue and recorded analyst outcomes
  • Screening API for authorised customer systems

Fraud decisions are rules-based screening results, not payment enforcement or AI anomaly detection. A connected customer system must act on the result. Loss and prevented amounts are analyst-recorded, not independently verified savings. Live monitoring, scans, patching, containment and round-the-clock staffing require authorised external tools and verified delivery arrangements.

Proposed service portfolio

The following services are proposed delivery options, not evidence of deployed tools or current staffing. Availability, licensing, hosting location and response commitments must be agreed and verified per customer.

24/7 Managed SOC

A sovereign security operations centre staffed around the clock, monitoring your estate from South African soil. Every alert is triaged, investigated and contained by analysts — not just forwarded to your inbox.

  • 24/7/365 analyst coverage
  • Proactive threat hunting on your telemetry
  • Containment actions executed on your behalf

XDR — Extended Detection & Response

Correlated detection across endpoints, identities, email, network and cloud. One console, one timeline, one incident — instead of five disconnected tools raising five disconnected alerts.

  • Endpoint, identity, email and network correlation
  • MITRE ATT&CK-mapped detections
  • Automated evidence collection

SOAR — Orchestration & Automation

Routine response is executed by governed playbooks in seconds: isolating hosts, disabling accounts, blocking indicators. Analysts focus on the judgement calls; machines handle the repetition.

  • Governed response playbooks
  • Sub-minute automated containment
  • Full action audit trail

Continuous Exposure Management

Your attack surface is discovered, scanned and prioritised continuously — ranked by exploitability (EPSS), known exploitation (CISA KEV) and business criticality, with remediation tracked to closure.

  • Asset discovery and inventory
  • Risk-based vulnerability prioritisation
  • Remediation SLA tracking

Identity & Privileged Access Defence

Identities are the new perimeter. We monitor sign-in behaviour, detect impossible travel and credential abuse, and govern privileged accounts across your estate.

  • Anomalous sign-in detection
  • Privileged access monitoring
  • Mailbox rule and phishing defence

Managed Genrev Firewall

Our own proprietary firewall platform — designed, built and maintained by Genrev Group. Deployed at your sites in high availability, managed and monitored by the SOC with no third-party OEM dependency.

  • Proprietary Genrev-owned technology
  • HA site deployment and management
  • No OEM licensing or authorisation required

Digital Forensics & Incident Response

When an incident escalates, our DFIR team preserves evidence, establishes the timeline, eradicates the threat and supports regulatory notification — POPIA, FSCA and sectoral obligations included.

  • Forensically sound evidence handling
  • Regulator-ready incident reporting
  • Post-incident hardening plan

Security Awareness & Human Risk

Adaptive awareness training and phishing simulation that measurably reduces click rates — with automated escalation paths and completion certificates for audit evidence.

  • Adaptive learning paths
  • Phishing simulation campaigns
  • Audit-ready certificates and reporting

Eight proposed defence layers

A coverage model for customer planning. Actual coverage depends on connected tools, validated evidence and the agreed service scope.

01Perimeter & Network
02Endpoint & Workload
03Identity & Access
04Email & Collaboration
05Application & API
06Data & Information
07Human & Awareness
08Governance & Recovery

Industry coverage planning

Estate records and fraud rules can be configured for different sectors. The examples below guide requirements and proposed service design; they do not establish deployed sector-specific detections or integrations.

Public Sector & Regulators

POPIA, PFMA and Treasury-aligned sovereignty reporting for citizen data.

Financial Services & Banking

PCI DSS 4.0, fraud-SOC fusion and resilience testing for core banking.

Insurance & Underwriting

FSCA and Prudential Authority alignment, claims-fraud analytics and King IV reporting.

Healthcare & Life Sciences

Patient-safety-first monitoring, IoMT discovery and PHI data-loss defence.

Mining, Energy & Utilities

IEC 62443 OT/IT convergence, Purdue segmentation and safety-instrumented change gates.

Retail & E-commerce

Payments security, bot and account-takeover defence, peak-season surge capacity.

Aviation, Transport & Logistics

ATM/OPS network segregation, cargo system assurance and crisis communication.

Telecommunications & Technology

Signalling abuse detection, subscriber-data protection and DDoS response at network scale.

Manufacturing & FMCG

Production-line OT segmentation, trade-secret DLP and line-down recovery playbooks.

Education & Research

Campus segmentation, research-IP protection and learner data compliance.

Agriculture & Agri-processing

Cold-chain and irrigation OT monitoring, remote-site connectivity and food-safety records.

Professional & Legal Services

Matter-level confidentiality, business-email-compromise defence and client assurance.

Media, Tourism & Non-profit

Broadcast continuity, donor data protection and brand-impersonation takedowns.

Evidence-led reporting

Open cases, assets, findings and acknowledgement times are calculated from saved records. Fraud reporting separates screened activity, analyst-confirmed outcomes and unmeasured results.

Traceable control evidence

Record framework references, evidence and review outcomes for ISO/IEC 27001, POPIA, NIST CSF 2.0 and other applicable obligations. Saved evidence does not establish certification or regulatory compliance on its own.

Talk to us about your estate

Whatever your industry — a municipal agency, a bank, an airline, a mine, a hospital, a farm or a retailer — contact Genrev Group to discuss your estate, data sources and delivery requirements. Demonstrations can use clearly identified test records.

+27 11 201 2159 · +27 60 723 4799 info@genrevgroup.com · sales@genrevgroup.com