David Ndolo

Most businesses find out they have a security problem the hard way. I try to make sure that doesnt happen.
Im David — a cybersecurity consultant and trainer based in Nairobi, Kenya. I hold 13 verified certifications from Cisco Networking Academy and SOS Regional Resources Centre, covering network defense, endpoint security, cyber threat management, industrial networking, and IoT. But more than the certs, what I actually do is hunt for vulnerabilities before attackers find them, write reports that non technical people can understand and act on, and train teams who think cybersecurity is someone elses problem.
Im an active researcher on HackerOne. I use real tools — BBOT, Nuclei, Burp Suite — on real targets. When I finish an assessment, you get a professional report with CVSS scores, CWE references, business impact explanations, and a remediation roadmap. Not a raw tool output. Not a template with your company name pasted in. An actual report.
On the training side, Im a peer lecturer at Thika Technical Training Institute. Ive explained phishing, social engineering, and endpoint hardening to students who walked in thinking a firewall was a piece of furniture. If I can make security click for them, I can make it click for your team.
I also built VidacyberBot — a multilingual WhatsApp AI assistant with threat detection built in — which tells you that I dont just talk about security tools, I build them.
Im also a published author. My book, Tech Evolution: Humanity in the Digital Age, is on Amazon Kindle. So yes, I can write — which matters when your deliverable is a security policy, an incident response plan, or a training module that your staff will actually read.
Here is who I work well with:
Small businesses that know they need to get serious about security but cannot afford a full time security team. Organizations that need security documentation written by someone who actually understands what the document is describing. Startups that want a real vulnerability assessment without the enterprise price tag.
Im not going to copy paste a Nessus scan into a PDF and call it a report. I take time to understand your actual environment, your real risks, and what your team can realistically fix. Then I tell you the truth about where you stand.
Message me before you hire if you want to talk through what you need. I read every message myself.