About Margsutech
A small team that builds like the stakes are real, because for our clients they are.
Margsutech builds secure web platforms and payment systems for businesses operating across borders. We work with healthcare suppliers, construction firms, clinics, and retailers whose systems handle money, patient records, or both, where a security failure is not an inconvenience but a material business risk.
Mission
What we are here to do
To make secure, payment-integrated software achievable for businesses that are usually told it is out of reach. Handling money and sensitive records well should not require an enterprise budget, and the businesses most exposed when it goes wrong are often the least able to afford getting it right.
Vision
Where we are going
To be the engineering partner African businesses trust with systems that cannot fail, and the one international companies turn to when entering African markets. Not the largest firm, but the one whose work holds up under scrutiny.
Values
What we hold ourselves to
Say what is true, including when it costs us
We state plainly what we have not done, what we are not certified in, and when a project is outside our competence. A prospect who finds the gap themselves has already stopped trusting us.
Security is not a line item
It is scoped, priced, and delivered with every build. We do not offer a cheaper version without it, because that version is the one that fails.
Narrow beats broad
We would rather be the obvious choice for secure, payment-integrated systems than a forgettable option for everything.
The client owns the work
Source code, documentation, and credentials are handed over. No lock-in through obscurity, and no dependency on us that we manufactured.
How we work
Deliberately narrow
Plenty of firms will tell you they do everything. We do not. Margsutech specialises in secure application engineering and payment integration, particularly where African payment rails meet international ones, and we say plainly when something falls outside that.
That discipline is not modesty. A capability only appears in our marketing once there is a shipped project behind it, because the alternative is a discovery call where the gap becomes obvious. When a project needs a specialism we do not hold in-house, we bring in a vetted subcontractor under our own accountability rather than improvise.
Leadership
James Mogusu Maroko
Founder & Lead Engineer
James is a full-stack engineer with a BSc in Computer Science and an MSc in Cybersecurity and Digital Forensics in progress at the Open University of Kenya. He has spent over three years shipping production systems for businesses across East Africa, alongside ICT roles with two Kenyan government ministries.
That combination is the reason Margsutech exists. Security expertise applied to systems you actually built yourself is a different discipline from auditing someone else's work after the fact, and it is rarer than it should be in this market.
2019 – 2023
BSc Computer Science
St. Paul's University
Jan 2022 – Present
Software Engineer, independent practice
Production web and payment systems for businesses across East Africa, maintained with ongoing client support.
Jan – Apr 2023
ICT Specialist
Ministry of Roads & Transport, Nairobi. End-user support, networks, and departmental systems.
Jul – Oct 2024
IT Intern
Pinnsoft Kenya Limited. Enterprise software deployment and government e-procurement tender preparation.
2024 – 2025
Full-Stack Software Engineering
Moringa School
Nov 2024 – Present
ICT, Digital Literacy Programme
Ministry of Education, Kenya. Supporting digital literacy integration in basic education.
2025 – Present
MSc Cybersecurity and Digital Forensics
Open University of Kenya (in progress)
Delivery model
How engagements are staffed
Margsutech operates with a core team and a vetted subcontractor bench, drawn on per project for domains outside our direct production experience. Every bench member signs an NDA, completes background vetting appropriate to the sensitivity of the work, and is granted scoped, project-level access with mandatory multi-factor authentication before touching any client system.
Accountability does not get distributed. Whoever does the work, there is a single point of responsibility for delivery and for any security or client-facing incident.
Where we are
Based in Kenya, working globally
We are based in Kisii, Kenya, and work with clients across time zones. Our process is built for asynchronous collaboration: written proposals, milestone visibility you can check without asking, and documented handovers rather than meetings as the default mode of communication.
Our working hours are 9:00 to 18:00 East Africa Time (UTC+3), which overlaps the European working day and the early US morning. We typically respond within one business day.