Engineer-led, Harare-based, accountable for what we build.
Lekkahub builds, secures and runs the systems Zimbabwean organisations depend on, from the cloud account to the finance team's invoices.
A Zimbabwean engineering consultancy
Lekkahub is a registered Zimbabwean company based in Harare. We exist because too many platforms in this country are built by outside teams who leave when the contract ends. We build in code you own, write things down and either hand over properly or stay and run what we built.
Our work spans eight services: cloud engineering, DevOps, custom software and integrations, managed operations, security and data protection, cost optimisation, Odoo ERP and AI automation.
Where our experience comes from
- Shared internal platforms: an AWS platform that grew to around 30 applications for users in several countries, with multi-country Odoo, release governance and a Cyber and Data Protection Act assessment.
- Healthcare and transaction platforms: taking over a cloud estate built by an outside firm, performance work, WAF and security remediation, private networking and failover between providers.
- Financial services: middleware between a payments platform and a T24 core banking system.
- Property: recovering a digital estate spread across several hosting providers and designing an Odoo-centred data architecture.
- Membership organisations: event websites with sponsors and billing, and monthly website and Odoo support.
- Software and education companies: application infrastructure on Hetzner, CRM integrations, and Prometheus and Grafana monitoring.
Held by our engineers
- ISC2 Certified in Cybersecurity
- OCI Foundations Associate
- OCI AI Foundations Associate
- Anthropic: Claude Code in Action, Claude 101, Responsible AI
- BSc Computer Engineering
Platforms
AWS, Microsoft Azure, Google Cloud, Oracle Cloud, Hetzner, DigitalOcean and bare metal.
What we believe
Facts over promises
We say what we found, what we will do and what it costs. If we cannot help, we say so.
Security first, then cost
Savings never come from removing a control you need.
Everything in code
If it is not in your repository, it is not finished.
Write the risk down
Decisions, changes and incidents are recorded, dated and shared.
Vendor-independent
We recommend the platform that fits the workload, not the one that pays us.
Confidential by default
We do not name clients or publish their details without written permission.
Tell us what you are running today.
Send a short note about your systems and what is getting in the way. You will hear back from the engineer who would do the work.