Direction before commitment.
Five connected security capabilities. Start with a posture snapshot; a human validates scope before proposal, agreement, or invoicing.
Five services. One program.
One evidence-and-scope decision connects five distinct services.
STARTING ACTION
Security Assessment
Prioritize the largest control gaps.
A deterministic, self-reported posture snapshot across eight control domains.
SCOPE MAY INCLUDE
- A 0–100 score and one of four defined posture bands
- Confidence based only on the number of “Not sure” answers
- The three largest weighted gaps with fixed next-rung actions
- Directional package fit based on size and technology footprint
BOUNDARY
It is not a technical assessment, certification, audit, or guarantee. Evidence review may change the findings.
PROGRAM CAPABILITY
Exposure Intelligence
Define the external signals worth monitoring.
Monitoring of agreed external identifiers and sources, with coverage, cadence, escalation, and evidence set in the engagement.
SCOPE MAY INCLUDE
- An agreed list of monitored identifiers and sources
- Human triage rules for material signals
- A defined notification and escalation path
- Remediation context appropriate to the validated scope
BOUNDARY
It is not endpoint detection and does not guarantee that every external disclosure or use will be detected.
PROGRAM CAPABILITY
Vulnerability Management
Turn agreed asset coverage into a remediation queue.
Human-reviewed vulnerability coverage for agreed external assets, with remediation ownership and retest rules defined in scope.
SCOPE MAY INCLUDE
- An explicit asset and testing boundary
- Human-reviewed findings with business context
- Agreed remediation ownership and deadlines
- Exception and retest handling defined in the engagement
BOUNDARY
It is not a penetration test unless the approved scope and rules of engagement explicitly say so.
DISTINCT ENGAGEMENT
Penetration Testing
Test an authorized scope and preserve the evidence.
An authorized offensive-security engagement with signed ROE, evidence, human review, remediation guidance, and agreed retest terms.
SCOPE MAY INCLUDE
- Scoped engagement with a signed Rules of Engagement
- Testing confined to the approved target and methods
- An evidence dossier and remediation guidance
- Human approval before client delivery
BOUNDARY
Public intake is not authorization to test. Testing never begins before scope and ROE approval.
PROGRAM CAPABILITY
Awareness Training
Build the people-side controls in the right language.
Role-aware security practice for client teams, with audience, language, scenarios, and evidence confirmed before delivery.
SCOPE MAY INCLUDE
- A defined audience and learning objective
- Role-aware scenarios appropriate to the validated need
- Arabic or English delivery as agreed
- Completion or outcome evidence defined in the engagement
BOUNDARY
It is not a certification or a guarantee that training alone prevents security incidents.
SEPARATE LEARNING PATHS
Awareness training is not the Academy.
Awareness training serves a client team; Zeroday Academy is a separate path for individual and professional learning.
Explore Zeroday Academy
A clear package band. A scope-validated proposal.
The assessment suggests a package band; scope validation confirms price, cadence, SLA, and entitlements.
- 01
COMPLEXITY BAND
Foundation
1–10 users
COMMERCIAL STATUS / Scope validated
- 02
COMPLEXITY BAND
Starter
11–30 users
COMMERCIAL STATUS / Scope validated
- 03
COMPLEXITY BAND
Growth
31–99 users
COMMERCIAL STATUS / Scope validated
- 04
COMPLEXITY BAND
Scale
100+ users
COMMERCIAL STATUS / Custom scope
SME packages are Foundation for 1-10 users, Starter for 11-30, Growth for 31-99, and Scale for 100+. Package fit is directional and subject to scope validation.
No online checkout. Qualification and scope validation precede proposal, agreement, and invoicing.
Standalone work also requires a proposal and agreement.
Built for this region.
Delivery across the MENA region on regional business hours, in Arabic or English. Reports can be provided in either language on request.
- HOURS
- Sun–Thu · 09:00–18:00 GMT+3
- LANGUAGES
- Arabic-first · English on request
- COMMERCIAL PATH
- Scope validation before any agreement
An immediate posture snapshot, before contact details.
Your result is immediate and ungated. A reviewed report is optional.