We break what others assume is safe.
A Saudi practice for offensive security and secure software engineering. Every engagement starts with a written scope and ends with a report your team can act on.
Offensive Security
We don't sell a vague "security assessment." Every engagement has a written scope, an agreed methodology, and one output: a report your team can execute against. Our practice is built on certifications including OSWE, OSCE3, OSEP, and others held within our network.
Web Applications & APIs
Authentication, authorization, and business-logic testing, up to remote code execution. No automated scans.
Internal Networks & Active Directory
Adversary simulation from a single foothold to full domain compromise, with every step documented.
Mobile Applications
Static and dynamic analysis of iOS and Android apps, including their server-side communication channels.
Exploit Development
Binary analysis and custom exploit writing when off-the-shelf tooling isn't enough.
Design
We design and build the interface your client will see, with the same rigor as the report we deliver. This section is the sample.
Software Engineering
We build what we can test. Web platforms, mobile apps, and infrastructure reviewed against the same standard we hold client systems to.
Web Platforms
Applications and dashboards built for long-term operation, not a demo.
Mobile Applications
End-to-end apps, from design to store release.
Masarif
Personal expense & budget trackerA consumer app for personal expense and budget tracking, live on the App Store.
masarif Available on the App Store ↗Mirsad
In progressNot yet public.
mirsadFaiz
AI employee for Salla & Shopify merchantsIn progress.
—How We Work
Written Scope
Exactly what will be tested, what won't, and when.
Agreed Methodology
Black-box, grey-box, or white-box — chosen before work starts, not during.
Immediate Escalation
Anything that threatens production doesn't wait for the final report.
Two-Tier Report
An executive summary for decision-makers, a technical breakdown for implementers.
Retest
We verify remediation and document closure.
Broken Verification on Password Reset
One finding, as it appears in the report we hand over.
The Standards We Build On
These certifications are held within our practice. They belong to their issuing bodies; showing them here does not imply endorsement by, or affiliation with, those bodies.
Request Engagement
We'll come back with a written scope, timeline, and price — not a general offer. Tell us three things.