XContent (Pty) Ltd

13/08/2026

Barron South Africa Partner Day 2026 is done, and it was a good one.

XContent was proud to be the main sponsor at the padel event, and we put a team on the court. The Joburg cold front did its best to spoil things. It didn't. Everyone brought the gees, played hard, and got real value out of the day.

Congratulations to the Barron team on a partner event that was well run from start to finish. The turnout, the energy, and the quality of the conversations spoke for themselves.

Thank you for having us. Here's to the next one.

27/07/2026

One platform for your company's whole digital identity: business cards, email signatures and Teams backgrounds, always on brand.

Try eKard free for 14 days 👉 portal.ekard.co.za

20/07/2026

Out of cards at the worst possible moment? Out of date a week after printing? There's a card that's never either.

Introducing eKards, the last business card you'll ever need.

Sign up for a 14 day sponsored engagement and see for yourself: https://portal.ekard.co.za/

10/07/2026

A leak doesn’t start with a breach. It starts with a forum post you’ll never
see.

Walk it backwards from the headline:
— The data appears on a leak site. Headline written. Reputational impact
starts.
— Days or weeks earlier, the leak is auctioned on a closed forum.
— Days or weeks before that, the threat actor mentions your company by
name in a chat — sometimes by code name, sometimes not.
— Often, weeks before that, your credentials, source code, or infrastructure
references show up in an unrelated leak that sounds like nothing.

By the time the headline lands, you’re 60 to 90 days late.

HAX, powered by Flare, monitors the forums, marketplaces, paste sites, and
Telegram channels where this conversation actually happens. Mentions of
your brand. Mentions of your subsidiaries. Mentions of your executives.

It surfaces them before the headline does.
→ Get a 30-day dark web sweep: https://xcontent.red/ ?

06/07/2026

Attack surface management is not asset management with a different brand
on the box.

The distinction matters.
Asset management answers: “What do we own?” That’s a CMDB question.
Attack surface management answers: “What is reachable from the outside,
by someone who doesn’t work here?”

The two lists are never the same. And the gap is usually where things go
wrong:
— The shadow API spun up by a developer for a quick test.
— The third-party SaaS that someone wired into your single sign-on.
— The forgotten subdomain pointing at an IP you stopped using two years
ago.

HAX maps the second list. Continuously. Across subsidiaries and
acquisitions. With change tracking, so you know what appeared overnight.
If your CMDB is your only source of truth, you’re looking at the wrong list.

→ See your real surface: https://xcontent.red/ ?

01/07/2026

14 of your employees’ credentials were posted on a leak forum last quarter.
You don’t know which 14.

That number is a placeholder. For most South African mid-market
organisations, it’s also a low estimate.

Credential exposure is the cheapest, most reliable initial access vector in
the threat actor’s playbook. It bypasses every perimeter control you’ve paid
for, because by the time they’re using the creds, they look like a legitimate
user.

HAX, powered by Flare’s threat intelligence, surfaces leaked credentials tied
to your domain in close-to-real-time and tells you which ones are still
valid against your tenant.

You can’t rotate what you can’t see.

→ Run a credential exposure check: https://xcontent.red/ ?

26/06/2026

This is what 24 hours of reconnaissance looks like for a real organisation we
don’t name.

Two new assets appeared. RDP on port 3389 went exposed overnight. A TLS
cert is six days from expiring. Fourteen credential pairs were posted on a
leak forum. A ransomware leak blog mentioned “treasury” by name.

Nothing here is exotic. All of it is the kind of thing that gets discovered the
hard way - usually at 02:00 on a Sunday by an on-call engineer who doesn’t
have the context.

HAX runs this sweep continuously. Then it ranks. Then it tells you which
three things to do first.

That’s the bit most platforms don’t do.
→ See a sample run: https://xcontent.red/ ?

12/06/2026

This weekend, one of our own takes on the Ultimate Human Race. Travis Copley is running the 99th Comrades Marathon, and he's doing it for a cause that matters: CHOC, the Childhood Cancer Foundation South Africa.

Good luck, Travis. Pace it smart, finish strong, and know the whole XContent team is behind you every step of the way. Bring it home.

01/06/2026

Our May issue is live! 📌

This edition captures the XContent Roadshow: the highlights, the insights, and the standout solutions we brought to customers along the way.

Thanks to everyone who joined us on our roadshow!

Read the May issue:

Elevate your tech narratives with the Wired template, purpose-built for digital publishers, tech journalists, and innovation-driven content creators. This dynamic framework combines sleek layouts with deep-dive article structures and interview formats optimized for modern audiences. Seamlessly integ...

12/05/2026

Your attack surface is much larger than you realise.

A statement of fact for every CISO and IT decision-maker we've worked with this year.

Shadow IT. Forgotten assets from a 90-day pilot nobody decommissioned. Third-party interfaces wired into your environment that someone left exposed. Open ports your CMDB doesn't know about. The list keeps growing, and attackers are already mapping it.

We built HAX for one reason: to map what you actually own, before an attacker does. Continuous attack surface intelligence, dark web monitoring, AI-prioritised remediation. Daily, weekly, monthly, on-demand, or fully continuous. Scan frequency on your terms. No lock-in.

Watch 90 seconds. If any of this resonates with what's keeping you up on Sunday night, the conversation is worth having.

30-minute discovery call: https://xcontent.red/

Without HAX it's not about if. It's about when.