What we do
Automated scanners find the obvious issues. We look for what they miss: business logic flaws, chained exploits and misconfigurations that signatures do not detect.
In-depth testing of authentication, session handling, access control, injection points and business logic. We also chain low-severity issues into the high-impact attack paths that scanners miss.
Learn more about Web application penetration testingExternal perimeter and internal network assessments, Active Directory attack paths, lateral movement and privilege escalation to domain compromise, all carried out safely under agreed rules of engagement.
iOS and Android testing across the full stack: local storage, certificate pinning, IPC, reverse engineering resistance and the backend APIs the app depends on.
Learn more about Mobile application securityREST and GraphQL testing for broken object-level authorisation, mass assignment and missing rate limits, plus a review of cloud configuration across identity, storage and network boundaries.
Learn more about API & cloud security assessmentObjective-based adversary simulation that tests how well you detect and respond to an attack, not only what is vulnerable. Phishing campaigns, pretexting and physical access scenarios, scoped to what you want to measure.
Readiness reviews and audit preparation for the frameworks you are assessed on. We turn technical findings into control-level evidence your compliance team can file. We do not issue certifications or carry out official compliance assessments.
How we work
Every engagement follows the same five steps. At each step you know where we are, what we have found and what comes next.
Before testing starts, we agree in writing on targets, testing windows, escalation contacts and what is off limits. The NDA is signed before you share any technical detail.
We map your attack surface and model the threats against your actual business risk, so effort goes where a real attacker would concentrate it.
A tester confirms every finding by hand and records a proof of concept your team can reproduce. Where exploiting an issue could harm your systems, we confirm it safely and explain how in the report. Unverified scanner output does not go into your report.
An executive summary for your board and a technical section for your engineers. Every finding has a CVSS score, remediation steps and, where you need it, the framework controls it affects.
When you have fixed the findings, we retest them. One retest of all confirmed findings within 90 days of the report is included at no extra cost. You then receive a closure letter that records the status of each finding.
What you receive
Six deliverables on every engagement, in Arabic, English or both, for your engineers, your leadership and your auditors.
Your risk in business terms: what is exposed, how serious it is and what to fix first. Written for leadership and the board.
Every finding with its CVSS score, affected assets, evidence and step-by-step reproduction instructions, so your engineers can confirm it themselves.
Fixes prioritised by risk and effort, with concrete guidance for your stack rather than generic advice.
Each finding mapped to the controls it affects in the frameworks you report against (NCA ECC, SAMA CSF, PDPL, ISO 27001 or PCI DSS), in a format your compliance team can file as audit evidence.
A walkthrough of the results with your engineers and leadership, where we answer questions and agree next steps.
Once you have fixed the findings, we retest them within 90 days and issue a closure letter recording the status of each one, for your auditors, clients or regulators.
Frameworks
We map each finding to the controls it affects in the frameworks you report against, so your compliance team can use the report as audit evidence.
Penetration tests scoped to ECC-2:2024 subdomain 2-11 (penetration testing), with each finding mapped to the controls it affects.
Learn more about Essential Cybersecurity ControlsPenetration testing for SAMA-regulated institutions, including the annual tests of customer and internet-facing services that the Cyber Security Framework calls for, with findings mapped to its domains and subdomains.
Learn more about Cyber Security FrameworkA technical review of how personal data is stored, sent and exposed across your applications and APIs.
Testing that produces evidence for the Annex A technological controls a test can show, such as management of technical vulnerabilities, packaged for your information security management system (ISMS) and audit cycle.
Penetration and segmentation testing scoped to Requirement 11.4 of PCI DSS v4.0.1.
Web testing follows the OWASP WSTG and mobile testing follows OWASP MASVS and MASTG. Our penetration tests follow the four phases of NIST SP 800-115: planning, discovery, attack and reporting.
Get started
A few lines on what you want tested are enough, with no sensitive detail at this stage. We will reply with a proposed scope, a timeline and a fixed price. There are no sales calls and no obligation, and we sign an NDA before you share any technical detail.
The fastest way to reach us. We aim to reply the same working day.
How we handle your details: Privacy Policy