A Saudi penetration testing company, built by practitioners
Thagharat is a penetration testing company based in Riyadh, founded by offensive security practitioners with more than nine years of hands-on experience testing web applications, networks and mobile apps. Our Arabic name, صائد الثغرات, means “the vulnerability hunter”.
We keep the practice deliberately focused: manual testing, proof for every finding, and reports in Arabic and English that work for engineers, auditors and regulators alike.
What we stand for
Offense is our background
We test the way attackers operate, because attacking systems is the work we come from.
Built for Saudi requirements
Findings mapped to NCA ECC, SAMA CSF and PDPL, with deliverables your regulator and your engineers can both use.
Discreet by default
An NDA before any technical detail, minimal data access during testing, and engagement data destroyed on request.
Certified across offence and governance
The certifications our team holds cover both sides of the table: breaking systems and auditing them. Behind them are more than nine years of hands-on offensive work.
Offensive security
Governance & audit
Tell us what you need tested
Send a short description of your environment and we will come back with a scope, timeline and fixed price. No sales calls, no obligation, and an NDA before any technical detail is shared.
Fastest route, usually answered the same day
- NDA signed before scoping
- Fixed-price engagements
- Retest included