Sentinel · By Avril Capital

We surface what your developer didn’t know to look for.

Sentinel audits your public-facing digital posture, website, app, social, and tells you, in plain language, where the legal, security, and conversion exposures actually live. Free summary in five minutes. Comprehensive report in five days.

01 · Why This, Why Now

AI made shipping easier than shipping safely.

A site that took six weeks to build now takes a weekend. Three Claude prompts and a deployment. The work that used to be deliberate, security headers, consent flows, schema markup, accessibility, the boring legal scaffolding, quietly got skipped.

The cost of that skip lands later, on someone else’s desk. A regulator. A fund manager doing due diligence. Someone with worse intentions than either.

“Tanzanian banks lost TZS 147.5 billion to digital fraud in 2024/25 alone, and that’s just the disclosed number, just one sector, just one year. The same posture gaps live on most public-facing sites in this country.”
Source · PCCB Performance Report, April 2026
02 · What You Get

Three tiers, one continuum.

From your public website, through your full perimeter, to your individual executives. Buy any tier alone, or combine.

Public-Facing Posture

Surface

Your website, app, and social presence audited across seven dimensions: trust & legal, conversion & UX, performance & mobile, SEO & discoverability, AI implementation, security hardening, and authorized penetration testing.

  • Free Public Summary
    Top-line score, headline findings.
  • Comprehensive Report: TZS 3.9M (USD 1,500)
    Founding tier · ~5 business days.
  • Implementation: TZS 2.6M (USD 1,000)
    Critical & high findings remediated.
Request a Free Summary
Org-Wide Deep Posture

Perimeter

Beyond the public site. Subdomain and cloud asset enumeration, exposed API discovery, GitHub credential leakage, dark-web brand monitoring, third-party SaaS exposure mapping, full DNS and email-auth posture.

  • Engagement, TZS 13M–26M (USD 5,000–10,000)
    Scope by org size.
  • 90-day re-scan retainer
    30% of engagement.
Speak to us
C-Suite Digital Risk

Executive

The personal layer. Per-executive digital footprint, leaked-credential monitoring, family attack-surface mapping, doxxing and impersonation risk, deepfake and synthetic-media surveillance. Quarterly briefings written for the executive, not the IT department.

  • Per executive, per year, TZS 6.5M–13M (USD 2,500–5,000)
    Subscription.
Speak to us
03 · The Process

Five days, four steps.

  1. You submit a URL.

    The free summary form takes thirty seconds. We audit only what’s publicly visible, no credentials, no permission needed, no surprises.

  2. We scan and synthesize.

    Within 48 hours, you receive your free summary: top-line score, grade, and the headline findings. Most clients are surprised by at least one of them.

  3. We propose the comprehensive report.

    Once you’ve seen the summary, you decide whether to commission the full audit. We send a fixed-scope proposal with a signed Rules of Engagement.

  4. Five business days later, you have your report.

    A boardroom-ready PDF with CVSS-scored findings, prioritized remediation playbook, and, if you’ve commissioned the Implementation tier, your critical and high findings already fixed.

04 · Buyer Profiles

Three kinds of buyer keep finding us.

Founders raising capital.

Investor due diligence increasingly includes a public-posture review. The site that closed your seed round will not close your Series A.

Banks, insurers, and fintechs.

The PCCB number is not abstract. A graded posture report is the cheapest insurance premium your risk committee will buy this year.

C-suites with personal exposure.

Doxxing, deepfakes, leaked credentials. If your face is on a billboard or you sit on a board, you have an attack surface you are not currently monitoring.

05 · Who We Are

Avril Capital. Twenty years of technology, fintech, and cybersecurity in East Africa.

Sentinel is built and operated by Avril Capital, a Dar es Salaam-based technology consultancy whose principals have spent two decades building, breaking, and fixing systems across Tanzanian banking, telecoms, and the public sector.

We don’t sell you a scanner. We sell you our judgment.

Visit avcap.co.tz

Find out what your site is telling the world.

The free summary takes thirty seconds to request and is yours to keep, whether or not you proceed.

We audit only public-facing surfaces. No credentials needed. No active testing without written authorization. Your data is never shared.