Penetration testing
We attack your systems the way a real attacker would, with your permission and written rules, to learn where someone could get in before anyone else does. An executive report for management, a technical one for the team, and a retest after fixes.
When you need penetration testing.
If any of these sound familiar, this service is for you.
- 01
A client or regulator requires a penetration test report.
- 02
You handle sensitive data or payments.
- 03
You made a major change to your system or infrastructure.
What we deliver.
We attack your systems the way a real attacker would, with your permission and written rules, to close the road first.
- 01
Web application testing
Business logic, sessions and authorization.
- 02
Mobile app testing
Local storage, traffic and back-end APIs.
- 03
Network testing
From outside and from inside the network.
- 04
Cloud testing
Misconfigurations, permissions and exposed services.
- 05
Social engineering
Agreed phishing simulations to measure awareness.
- 06
Reporting and retest
Findings ranked by severity and verification after fixes.
What every engagement includes.
Written scope and rules of engagement
A management report and a technical report
A prioritized remediation plan
A retest after fixes
How we work.
Five steps, and at each one you know what you will receive, and when.
- 01
Understand
A call where we hear about your business, your customers and what you want to change, then agree what gets built first.
You getA written proposal with scope, price and timeline
- 02
Design
You see the screens, try them and change them before we write a single line of code.
You getA design you try and approve
- 03
Build
We build in short stages and you try each one yourself, so you never wait until the end to see results.
You getA preview with every stage
- 04
Test & secure
We test speed and features, try to break in ourselves, and fix what we find before your customers see it.
You getA report of what we tested and fixed
- 05
Launch & stay
We launch with you and train your team, then stay on for monitoring, updates and fixes.
You getSupport and follow-up after launch
What does penetration testing cost?
We won’t throw out a random number before we understand what you need. These are the factors that set the price; after a short call we send a written proposal with price, phases and timeline, with no obligation.
Request a quote- 01
Number of pages and screens
Every screen, user type and report adds work, so we start with what matters most and leave the rest for a later phase.
- 02
Connections to other systems
Payment gateways, shipping carriers, accounting systems and government platforms, each with its own requirements.
- 03
Level of design
An experience fully designed for your brand, or practical screens on an existing design system at a lower cost.
- 04
How sensitive the data is
Patient and payment data need more controls than a company site, as do in-country hosting rules.
- 05
Number of users
A system for a hundred users differs from one for a hundred thousand, in how it’s built and what it costs to run each month.
- 06
Support after launch
The response time you need, and the size of monthly updates.
Questions about this service.
Will testing disrupt live systems?
We agree scope, timing and techniques in advance, and test sensitive environments off-peak or on a matching copy.
How much does a penetration test cost?
It depends on the number of apps, addresses and networks in scope, the test type (black, grey or white box), the environment and the retest. We send the price in writing once the scope is agreed.
What is the difference between a vulnerability scan and a penetration test?
A scan is an automated tool looking for known weaknesses. A penetration test is an engineer actually trying to get in, the way an attacker would, chaining small gaps together to find what tools miss.
How often do we need a penetration test?
At least once a year, after any major change to the system, or as your sector’s regulator requires.
What do we receive?
An executive report, a technical report with reproduction steps and fixes for each finding, and a retest letter.
Do you sign an NDA?
Yes, before any access to your systems, and we delete any data obtained once the work ends.
Write to us and a person from the team replies directly.
Let’s talk about penetration testing.
Send your idea or a link to what you have today, and a person from the team replies within one business day with the next step.
From Egypt to Saudi Arabia, the Gulf and the world.