Frequently asked questions
Short answers. If yours isn't here, ask.
Assessments
What types of security assessments do you offer?
Web, mobile, API, network (internal/external), cloud, wireless, social engineering, red team and OT/ICS.
Will testing cause downtime?
No. We agree rules of engagement, test windows and excluded systems up front, and never run denial-of-service checks without explicit approval.
Can you test our internal network?
Yes: on site in Oman and the GCC or via a hardened drop-box we ship to you.
Reports
What does a typical report include?
Executive summary, risk score, technical findings with evidence and CVSS, remediation, compliance mapping, retest results.
Do you offer retesting?
Always, and it is free within 90 days of the report.
Engagement
How long does a typical assessment take?
Web app: 1 to 3 weeks. Network: 1 to 2 weeks. Red team: 4 to 8 weeks.
How do we get started?
Use the Scope Builder or contact us; we respond within one business day.
Company
What certifications does your team hold?
OSCP, OSEP, OSWE, CRTO, CISSP, Fortinet NSE and Cisco CCNP Security.
Do you work with banks and government?
Yes, they are most of our clients. We hold the clearances and NDAs those engagements require.
Is our data kept confidential?
Data minimisation, encrypted evidence storage, deletion after 90 days unless you ask otherwise.