FOR THE MIDDLE EAST & NORTH AFRICA

Democratizingcybersecurity.

Advanced cybersecurity, made more accessible to organizations across MENA. We bring offensive security, our own technology, and practical learning together.

Talk to our team Explore our services

A hand lifts one damaged red cable out of a tangle of computer connections, bringing the issue into clear view. — 01Explore the exposure02Verify the evidence03Know the next step

A team rooted in MENA

Reports in Arabic or English

Expert-reviewed pentest reports

WAYS TO WORK WITH US

Advanced capability. A practical way in.

A focused penetration test, a portal being developed for recurring security work, or a private deployment. Each has a clear scope and next step.

A hand pulls a vermilion thread from a woven laptop screen, opening a gap that reveals documents behind it.

Penetration testing

Qualified engagements

A paid, scoped test with expert-validated findings and a report your team can use for remediation.

Explore penetration testing

A hand chooses a precision instrument from an open tool roll, beside tools for inspection and careful repair.

Security Portal

In development

Four planned capabilities for readiness, exposure, vulnerabilities and awareness, supporting security work between tests.

Explore the Portal

Tweezers lift one yellow gear with a chipped tooth above an open watch movement, revealing the connected mechanism beneath.

Private deployments

Individually scoped projects

Discuss Portal hosting, integration and branding around your organization’s requirements, with separately agreed implementation and licensing.

Explore private deployments

For enterprise teams For government organizations

WHAT GOOD SECURITY WORK LEAVES YOU WITH

Findings your team can act on.

A penetration test report should explain the attack path, its impact, and how to fix it. Explore a complete illustrative finding before you speak to us.

See a sample finding

INSIDE A FINDING

FICTIONAL EXAMPLE

A valid login isn’t enough.

A magnifying glass enlarges a torn paper fiber on a proof sheet, with a red pencil marking the precise defect.

Account A: Valid session
Ownership check: Missing

SAME REQUEST. DIFFERENT RESULT.GET /api/v2/invoices/41021200 · Data exposed

The application trusts an invoice ID without checking who owns it.

FINDING R–01High severity

Cross-account access to invoices

Business impact: A user could read another account’s invoices by changing the invoice ID.
Recommended fix: Check invoice ownership on the server before returning any data.
Retest: Repeat the request with both accounts. Cross-account access should be blocked.

Illustrative scenario only. No client data, live test, or real engagement result.

OUR TECHNOLOGY. OUR RESPONSIBILITY.

Powered by Obsidian. Accountable to you.

Obsidian is our offensive-security engine. It supports reconnaissance and attack-path exploration within approved scope. Our team authorizes the work, reviews findings, and approves delivery.

Meet Obsidian

Obsidian

01Approved scope

02Attack-path exploration

03Human validation

04Approved report delivery

Delivered through Zeroday services. Not separately licensed.

BUILT AROUND THE REGION

Technical depth. In your team’s language.

We are a distributed team focused on MENA. Arabic and English delivery is agreed around your team’s needs, with technical learning supported by Zeroday Academy.

About Zeroday Explore the Academy

One colleague points to a connector diagram on a laptop while another draws the same connector in a notebook.

Your contracting partner: Zeroday Technology LLC
Working hours: Sunday–Thursday, 09:00–18:00 GMT+3
Information handling: Our security practices

YOUR NEXT STEP

Let’s start with what you need.

Two different coffee cups and pencils surround a shared notebook, showing the same technical idea from two perspectives.

Tell us what you want to protect, what you need to understand, and when you want to start. We’ll review your request and discuss the right next step.

Talk to our team