011 882 0664 | info@maximumnotion.co.za | Midrand, Gauteng MaxLearning  ·  Strategic Partner — AI Software Development
Human threat intelligence · Insider threat prevention
Applied AI · AI education

Systems don't leak.
People do.

Maximum Notion works on the human layer of risk — the people inside an organisation, the networks around them, and the behaviour that shows up long before a loss does. We build the intelligence programmes that find it, and the software that runs them.

Investigative practice since 2007, engineered into software. Registered in South Africa; operating from Midrand, Gauteng.

Signal · Correlation · Escalation
HTI
Human Threat Intelligence
Understanding the people and networks that create exposure, before they act.
ITP
Insider Threat Prevention
Programmes that detect, triage and resolve risk from inside the organisation.
AI
AI & Software Development
Agents, MVPs and modernisation, delivered with AI Software Development.
EDU
AI Education
MaxLearning — 300+ courses, first computer skills through to verified employment. maxlearning.co.za
Protective services · PSIRA 2393012 · ISO certified

Mine protection, armed response and VIP CPO and escort services — still ours.

The practice the firm was built on has not gone anywhere. Eight service lines, from shaft perimeters and in-transit escorts to close protection and 24/7 control-room monitoring — run by the same people whose evidence has to stand up afterwards. Several operating mines are currently under contract.

Mine protectionArmed responseVIP CPO & escort Transport securityPhysical guardingCCTV monitoring Systems & access controlRisk assessment
See Maximum Notion Security Division →
Capabilities

Investigators and engineers, working the same file.

Insider risk sits in a gap. Cyber teams see systems and not people. HR sees people and not evidence. Consultancies write the framework and leave before anything is built. We do the enquiry work, we build the software, and we train the people who have to run it after we go.

HTI

Human Threat Intelligence.

Technical threat intelligence tells you what is attacking your infrastructure. Human threat intelligence tells you who, on what basis, and who around them makes it possible. It is the discipline our investigative practice was already doing — now run with better instrumentation.

Assessment

  • Threat and exposure assessment — where an organisation is reachable through its people, contractors and supply chain.
  • Human network mapping — relationships, associations and dependencies that a structure chart does not show.
  • Executive and principal risk — protective intelligence for individuals, travel and events.
  • Pre-appointment and periodic vetting — identity, history, qualifications, conflicts and adverse findings.

Collection & reporting

  • Open-source enquiry — lawful collection from public and licensed sources, recorded so it can be audited.
  • Field enquiry and surveillance — where a matter needs observation rather than records.
  • Behavioural indicator review — established insider-risk indicators applied to a defined population, with human judgement over the output.
  • Assessed reporting — findings separated from inference, with confidence stated, in a form that survives challenge.
ITP

Insider Threat Prevention.

An insider threat programme is not a tool you install. It is a standing capability with an owner, a legal basis, a threshold for acting, and somewhere for a concern to go. We design it, build what it runs on, and hand it over working.

01

Baseline

What is worth protecting, who can reach it, and what the organisation would actually notice today.

02

Framework

Policy, legal basis, indicator set, escalation thresholds and the governance that decides who may look at what.

03

Instrument

The signals, systems and case tooling that make risk visible — built to the framework, not the other way round.

04

Triage

Concerns assessed by people, not by a score alone. Most resolve as nothing. The rest become a file.

05

Resolve

Investigation, evidence handling, disciplinary or civil support, offboarding, and what changes so it does not recur.

What it covers

  • Programme design and ownership model — including who decides, and on what authority.
  • Joiner, mover, leaver risk — the transitions where exposure concentrates.
  • Third party and contractor risk — the access you granted and never reviewed.
  • Case management and evidence handling — chain of custody maintained from first concern.

How we keep it defensible

  • Lawful basis first — monitoring scoped under POPIA and employment law before anything is switched on.
  • Proportionality — the least intrusive method that answers the question.
  • Human in the loop — no adverse action taken on a model output alone.
  • Auditability — every access, decision and escalation recorded and reviewable.
AI & Software Development

We build the software we rely on.

The tooling behind our intelligence work is not bought off the shelf. It is built — with our Strategic Partner, AI Software Development (Pty) Ltd — alongside client delivery: risk models, entity resolution, signal correlation and case management, plus AI work that has nothing to do with security at all.

The firm

Maximum Notion

The South African operating entity. Human threat intelligence, insider threat prevention, applied AI, and the protective services practice the firm was built on.

Registered 2007 · CK 2007/021503/23 · PSIRA 2393012
maximumnotion.co.za
Strategic partner — AI Software Development (Pty) Ltd

AI Software Development

AI agents, AI MVPs and AI modernisation for teams that need to ship. Production of AI solutions and platforms.

Strategic partners

Outside the wall, inside the data, and everything being said.

Exposure does not arrive on one front, and no single discipline covers all three. What an adversary can reach from outside, the data itself while it is in use, and the information environment forming around you — each is held by a specialist who does nothing else. All three are strategic partners of Maximum Notion, and what they find feeds one intelligence picture rather than three separate consoles.

Outpost24

The Perimeter

Everything an adversary can reach from outside.

Exposure and vulnerability management: attack surface management, penetration testing as a service, threat intelligence, credential-breach monitoring and identity security. Discover, test, prioritise, fix — continuously.

outpost24.co.za
CanaryBit

The Vault

The data itself, protected in use.

Infrastructure and AI security: confidential computing, confidential AI, sovereign data residency and production AI implementation — so sensitive workloads stay protected even from the operator running them.

canarybit.co.za
Black Cube

The Information Environment

What is being said — and who is manufacturing it.

DSM-SOC: 24×7 graded intelligence on the public information environment around a principal, ministry or national programme; lawful measured counter-narrative response; and, once the evidence justifies it, forecasting, synthetic-media detection and influence-network mapping.

blackcubedefence.co.za
AI Education

MaxLearning.

The same conviction, applied earlier: most capability problems are people problems. MaxLearning takes someone who has never touched a computer and carries them — in their own language, on any device, with or without signal — from their first click to a verified career.

300+
Courses on the platform
15,000+
Hours of structured instruction
maxlearning.co.za
01First computer skills
02Business administration
03Bookkeeping
04Digital marketing
05IT support
06Cybersecurity
07Digital forensics

Not a course library. A pipeline.

Test, teach, coach, assess, match, place and prove — running as one system. Assessment that cannot be faked, certificates that verify as digital employability, and follow-up at 3, 6 and 12 months to measure whether people are actually working.

Visit MaxLearning Bring it to your learners

Delivered to government and educational institutions, not individual sign-ups.

Governance

Intelligence work and AI both fail the same way.

Not on capability — on handling. Four commitments apply to every engagement, whether the output is a report or a model.

Registration

PSIRA

Registered security service provider, PSIRA 2393012, close corporation registered 2007 under CK 2007/021503/23. Officers are individually registered and their grades are available on request.

Data

POPIA

Personal information is processed for the instructed purpose and no other. Scope, lawful basis and retention are agreed in writing before collection begins.

Evidence

Chain of custody

Every exhibit is logged with time, place and the person who collected it, so it can be put to a hearing or a court without an argument about where it came from.

Models

Human in the loop

Models rank and surface; people decide. No adverse action is taken against an individual on a model output alone, and every escalation is attributable to a named reviewer.

Maximum Notion seal: Investigation, Criminal Detection and Security Services
Protective services

The practice the firm was built on.

Maximum Notion has been a registered security service provider since 2007, and it remains core to the business. It is why our intelligence work is grounded in evidence rather than dashboards — and why we can put people on the ground when a matter requires it.

PSIRA 2393012 · Officers individually registered · 24/7 office and call-out.

See Maximum Notion Security Division →

Mining security

Layered protection for shafts, plants, stockpiles and perimeters. Armed deployment and access control against illegal mining and syndicate theft.

Several operating mines currently under contract.

Armed response

Verified activations, GPS-dispatched vehicles, fast armed reaction. Scene secured, occupants assisted, clean handover.

Coverage area and response times confirmed per site at assessment.

VIP protection & escorting

Discreet close protection for executives, dignitaries and families. CPOs, advance work, low profile.

Transport security

Armed in-transit escorts, route planning and live tracking. High-value loads covered from loading bay to delivery.

Physical guarding

Vetted, PSIRA-registered guards for commercial, industrial and residential sites. Supervised patrols, access control, accountable shifts.

24/7 CCTV monitoring

Trained operators watching your sites around the clock. Incidents spotted live, alarms verified, response dispatched in seconds.

Security systems & access control

Alarms, cameras, electric fencing and gate automation. Installed and maintained to work with your guarding plan.

Risk assessment

Site surveys and threat assessments before anything is deployed. Budget goes to real risk, not assumed risk.

Security division

The protective services practice now has its own site.

Mine security, armed response, transport escorting and VIP close protection — set out in full, with the drone patrols, camera analytics and insider-threat work that sit behind them.

See Maximum Notion Security Division →
Certification

Certified to five ISO standards.

Maximum Notion operates management systems certified to ISO 9001, ISO 14001, ISO 50001, ISO 22301 and ISO 45001 — covering quality, environmental performance, energy, business continuity and occupational health and safety. The same standards apply across every service line, not only the protective practice.

ISO 9001
Quality management
ISO 14001
Environmental management
ISO 50001
Energy management
ISO 22301
Business continuity
ISO 45001
Occupational health & safety
Contact

Request a briefing.

Tell us what you are trying to protect, or what you are trying to build. If it is not something we should take on, we will say so on the first call.

Goes straight to xolani@maximumnotion.co.za.

Telephone
Director
Xolani Danis Ngono
xolani@maximumnotion.co.za
Office
32 Richards Drive, Halfway House
Midrand, 1685, Gauteng
Hours
24/7 — office and call-out