ScaryByte · lawful, ethical, accountable
Compliance.
HornetStrike is operated by ScaryByte (Pty) Ltd. Operations run only inside the law, and with accountability. The record below is the company’s, as published at scarybyte.com/compliance (opens in a new tab).
Certifications and assurance
Information security management system
ISO/IEC 27001:2022
- Certificate
- ZA261007007
- Body
- LMS Assessments Limited
- Issued
- 7 October 2026
- Surveillance / expiry
- 6 October 2027
- Recertification
- 6 October 2029
Scope: provision and management of cybersecurity products and services, software development, and managed information technology services, covering the associated information security management and support processes.
Statement of Applicability version 1.0, dated 26 April 2026.
Covers the organisational management system, not an individual product by itself.
Certificate (opens in a new tab)Certification body (opens in a new tab)
Quality management system
ISO 9001:2015
- Certificate
- QMS-SBT-015
- Body
- UbiCert
- Issued
- 7 September 2026
- First surveillance
- 7 September 2027
- Second surveillance
- 7 September 2028
- Recertification
- 6 September 2029
Scope: cybersecurity products and services, software development and IT managed services.
Covers the organisational management system, not an individual product by itself.
Certificate (opens in a new tab)Certification body (opens in a new tab)
Protection of Personal Information Act 4 of 2013
PoPIA
- Certificate
- S6725583SA/2026
- Body
- Baitseanape Management Consulting (Pty) Ltd
- Assurance as at
- 7 October 2026
- Expiration
- 6 October 2027
Review of ScaryByte (Pty) Ltd policies, procedures and processes against the Act and the 2018 regulations.
Independently assessed by BMCSA. Reasonable assurance of the Privacy Information Management System and Privacy Compliance Framework, based on the issuer’s review.
Certificate (opens in a new tab)Certification body (opens in a new tab)
Regulatory standing
ScaryByte operates as a registered private security provider under South African law.
- PSIRA registered security service provider, No. 4895549, and compliant
- ISO/IEC 27001:2022 certified information security management
- ISO 9001:2015 certified quality management
- PoPIA compliance assurance by BMCSA
- Member of the Association of Certified Fraud Examiners
- Certified Fraud Examiner credential held
- Subject to regulatory oversight
- Regular compliance audits
- Transparent governance structure
Legal and ethical framework
- Lawful authority verification
- Proportionality in response
- Ethical use of capabilities
- Responsible disclosure
Data protection and privacy
- PoPIA-aligned processes
- Reasonable assurance from the BMCSA review
- Data minimisation
- Secure handling
- Client data sovereignty
Restricted
Controlled capabilities
- SIGINT toolkits (FalconOne)
- Technical surveillance support
- Lawful interception assistance
- Certain intelligence products
Required before access
Authority
- Valid legal authority, such as a warrant or court order
- Government or law-enforcement mandate
- Verified organisational credentials
- Signed engagement terms and NDA
- Due diligence completed
ScaryByte may decline any engagement that does not meet these requirements. Controlled capabilities are deployed only under proper authority, and with an audit trail. Lawful interception assistance is a ScaryByte service for authorised entities. It is not a claim that the HornetStrike platform collects the content of private communications.
