Why South African Businesses Overpay for Bad Software

The R50,000 Website That Cost R500,000

A client came to us last year with a request that we hear constantly: "We need our website fixed." What they actually needed was a complete rebuild. Their R50,000 website, built three years earlier by the cheapest bidder, had become the source of:

3 security breaches resulting in customer data exposure

An average 8-second mobile load time (industry standard: under 3 seconds)

Zero SEO visibility, despite the market they operated in having high search intent

A dependency on a developer who had become unresponsive

No source code access — it was locked in a proprietary CMS

The cost to rectify this? R180,000 in emergency development work, plus undisclosed legal and reputational costs from the data breaches.

Why This Keeps Happening

South African businesses, particularly SMBs, often evaluate software development the way they'd evaluate commodity procurement: lowest price wins. This framework fails completely when applied to knowledge work, because the inputs aren't standardised.

Two developers quoting R30,000 and R120,000 for the "same" website aren't quoting for the same product. The R30,000 quote almost always reflects:

Templates and no-code tools sold as "custom development"

Junior or offshore teams with limited quality oversight

No testing infrastructure or security practices

Minimal or no documentation

IP and access control issues post-completion

How to Evaluate a Development Proposal Properly

1. Ask About the Stack

The technology choices tell you everything. Is it a well-supported, community-backed stack? Or is it proprietary, obscure, or version-locked?

2. Demand Source Code Ownership Upfront

Any reputable development partner will hand over all source code and repository access upon project completion. This should be explicit in the contract.

3. Ask Who Specifically Will Build It

Many agencies win work with senior talent and deliver with junior developers. Ask for the specific team members and their experience level.

4. Review Their Security Practices

Do they have code review processes? Do they follow OWASP guidelines? Do they conduct basic penetration testing? If they look blank at these questions, walk away.

5. Ask for References

Not just testimonials on their website — actual references you can call.

The Investment Mindset

Good software is not a cost — it's infrastructure. The right question isn't "how little can we pay?" but "what's the cost of getting this wrong?"

At Keystone, we price at a premium because we build at a premium. We'll never be the cheapest option. But the ROI on properly-built software — in time saved, conversions gained, security maintained, and scale achieved — makes the calculus straightforward for businesses who have been through the alternative.

Thandi Mokoena

Head of Strategy

Part of the Keystone Software team, building premium software for South African businesses.

Want to talk about your project?

We'd love to hear what you're building.

Get in Touch