Skip to main content
PROFESSIONAL IT SERVICES SINCE 2001

Seven stacks.
One team.
All accountable.

Microsoft 365, Google Workspace, DMARC, Bitdefender, Hexnode, Intune, and Exclaimer. Deployed as projects, managed as a service. Direct line, no tickets, no queues.

25yrs
In business since 2001
< 1hr
Remote support response
95%
Issues resolved remotely
R0
Travel callout fees
Service catalogue

What we actually cover

Client outcomes

What the work looks like in practice

Client names withheld at their request. Sector and seat count accurate.

Property management group
Financial services · 60 seats
Exclaimer + DMARC
1 week
6 months of unused licences fixed

Had Exclaimer licences for 6 months, half-deployed by the previous IT firm. SPF was at 11 lookups. Outbound mail showing soft fail to Outlook.com recipients. Two different logos in circulation.

SPF flattened to 6 lookups, DMARC moved to p=reject within three weeks
Legal firm, 4 offices
Professional services · 85 seats
M365 + Intune + Break-glass
3 weeks
Admin access fully recovered

Previous IT company held the Global Admin account. Relationship ended badly. No break-glass. 85 users on M365 Business Premium with Intune licences never configured.

Admin access recovered, break-glass redesigned, Intune rolled out across all devices
NGO, multiple domains
Non-profit · 120 seats
DMARC + Google Workspace
6 weeks
Phishing impersonation stopped

Donors receiving phishing emails that appeared to come from their domain. Three legacy domains, each at a different DNS registrar. No DMARC on any of them.

All three domains at p=reject, Google Postmaster showing 100% authentication rate
What clients say

Not from the brochure

We had Exclaimer licences but we didn't have Exclaimer. OSH gave us the actual product.

M. van der Berg
Operations Director · Property Management Group

They told us what was wrong with our current setup before we paid them anything. That's not normal.

J. Fourie
Managing Partner · Legal Firm

Three legacy domains, three registrars, zero DMARC. Six weeks later, all three at p=reject and no more impersonation complaints.

T. Dlamini
IT Administrator · NGO
How we engage

How we engage

01
Audit

We map your existing licences, tenants, DNS, identity, endpoints, and email authentication. You get a written report of what is configured, what is missing, and what is leaking money.

02
Plan

We prioritise the gaps by risk and cost, then propose a sequenced roadmap. Quick wins first, structural changes second, optimisation third.

03
Implement

Senior engineers do the work: migrations, hardening, Conditional Access, DMARC enforcement, signature rollouts, endpoint deployment. Scoped projects with fixed deliverables.

04
Manage

Ongoing operations: monthly reviews, helpdesk escalations, scripted automation, licence right-sizing, and quarterly posture checks against CIS and Microsoft Secure Score.

Questions

What people usually ask first

No. Most clients start with one or two (usually the painful one: a failed M365 migration, a DMARC quarantine that broke billing emails, ransomware on an unmanaged laptop) and add the rest as the gaps surface. We are happy to be the second opinion on a single project.
Both. We resell Microsoft 365, Google Workspace, Bitdefender, Hexnode, and Exclaimer. The licence is the easy part. The deployment, the hardening, the documentation, the ongoing operations: that is where most of the engagement sits.
Yes. Co-managed engagements are common. We typically own the specialised areas (Conditional Access design, DMARC enforcement, GravityZone tuning, signature templating) while your internal team handles day-to-day support and user requests.
Most of our clients sit between 50 and 500 seats, but we take on specialised projects (DMARC enforcement, M365 tenant-to-tenant migration, Hexnode rollout) for organisations up to 1,000–2,000 seats. If you have a well-defined scope, the size is rarely the constraint.
OSH.co.za is based in South Africa but works with clients in other countries including the UK, the USA, and others. Cloud work is borderless. The platform does not care where the admin console is.

Not sure which service you need?

Book a 60-minute discovery call. We'll map your existing stack, flag the highest-ROI gaps, and tell you which service to start with. Even if the answer is none of them yet.