About us
A Saudi penetration testing company, built by practitioners
Thagharat is a penetration testing company based in Riyadh. We test web and mobile applications, APIs, networks and cloud environments. Our name, ثغرات, is Arabic for “vulnerabilities”, and our full Arabic name, صائد الثغرات, means “the vulnerability hunter”.
We keep our work deliberately focused: experienced testers, evidence for every finding and reports in Arabic, English or both that work for engineers, auditors and regulators alike.
- Trade name
- شركة صائد الثغرات
- Commercial registration
- 7055275007
- ZATCA registration number
- 3150625262
- info@thagharat.com
- Phone
- +966 50 601 6914
Our principles
We think like attackers
We test the way real attackers work, because authorised offensive security is where our founders built their careers.
Built for Saudi requirements
Findings mapped to NCA ECC, SAMA CSF and PDPL, with deliverables your regulator and your engineers can both use.
Confidential from the start
An NDA before any technical detail, minimal data access during testing, and engagement data kept in Saudi Arabia and destroyed, with written confirmation, when the agreed retention period ends.
Get started
Tell us what you need tested
A few lines on what you want tested are enough, with no sensitive detail at this stage. We will reply with a proposed scope, a timeline and a fixed price. There are no sales calls and no obligation, and we sign an NDA before you share any technical detail.
The fastest way to reach us. We aim to reply the same working day.
- NDA before any technical detail
- Fixed price for the agreed scope
- One retest included
How we handle your details: Privacy Policy