Request Engagement

We break what others assume is safe.

A Saudi practice for offensive security and secure software engineering.

Request Engagement See Our Work

4 problems found

Offensive Security

We don't sell a vague “security assessment.” Every engagement has a written scope, an agreed methodology, and one output: a report your team can execute against.

Our practice is built on certifications including OSWE, OSCE3, OSEP, and others held within our network.

Web Applications & APIs

OSWEeWPTX

Authentication, authorization, and business-logic testing, up to remote code execution. No automated scans.

Internal Networks & Active Directory

OSEPCRTPCRTO

Adversary simulation from a single foothold to full domain compromise, with every step documented.

Mobile Applications

eMAPT

Static and dynamic analysis of iOS and Android apps, including their server-side communication channels.

Exploit Development

OSEDOSCE3

Binary analysis and custom exploit writing when off-the-shelf tooling isn't enough.

Design

Visual identities and logos, interfaces and websites, and government websites and apps. Structure comes first, then the craft.

LOGOCARTH1 · the promise, in one lineBody · two lines at mostPRIMARYSECONDARYBRAND ARTPATTERN BANDPRODUCT CARD × 3 · image, name, origin, price, addسمرةSAMRA ROASTERSCoffeeBrew guidesVisit usCart · 2Roasted in Riyadh,one batch a day.Single-origin beans from Jazan and Yemen,roasted light for Saudi coffee, dark for espresso.Shop the roastOur farmsسمرةJazan LightJazan, Saudi ArabiaSAR 68Haraz MediumHaraz, YemenSAR 74Espresso DarkHouse blendSAR 62LOGO≡BRAND ARTPATTERNH1 · two short linesPRIMARYسمرةSAMRAسمرةRoasted in Riyadh,one batch a day.Single-origin beans from Jazan and Yemen.Shop the roastJazan LightJazan, Saudi ArabiaSAR 68
A sample concept for a fictional coffee roaster, with generated product photos. Drag the line to move between the wireframe and the finished design.

Software Engineering

We build what we can test. Web platforms, mobile apps, and infrastructure reviewed against the same standard we hold client systems to.

Web Platforms
Applications and dashboards built for long-term operation, not a demo.
Mobile Applications
End-to-end apps, from design to store release.
Products we have built
ProductWhat it isStatus
MasarifPersonal expense & budget tracker A consumer app for personal expense and budget tracking, live on the App Store. Available on the App Store (opens in a new tab) Shipped
MirsadIn progress Not yet public. In Progress
FaizAI employee for Salla & Shopify merchants In progress. In Progress

How We Work

Every engagement starts with a written scope and ends with a report your team can act on.

  1. Written Scope

    Exactly what will be tested, what won't, and when.

  2. Agreed Methodology

    Black-box, grey-box, or white-box: chosen before work starts, not during.

  3. Immediate Escalation

    Anything that threatens production doesn't wait for the final report.

  4. Two-Tier Report

    An executive summary for decision-makers, a technical breakdown for implementers.

  5. Retest

    We verify remediation and document closure.

AQL Technology Finding

Any Customer Can Open Any Invoice

Severity
Critical
Impact
A signed-in customer can read other customers’ invoices by changing one number.
Evidence
Full request/response pair, with screen recording.
Reproduction
Four numbered steps on the test environment.
Remediation
Return an invoice only to the account that owns it, and test that rule.
One finding, as it appears in the report we hand over.

The Standards We Build On

These certifications are held within our practice. They belong to their issuing bodies; showing them here does not imply endorsement by, or affiliation with, those bodies.

  • OSCP+
  • OSWE
  • OSCE3
  • eWPTX
  • OSED
  • OSEP
  • CRTP
  • CRTO
  • OSWP
  • eMAPT
  • eCPPT
  • eJPT

Request Engagement

We'll come back with a written scope, timeline, and price, not a general offer. Tell us three things.

Opens your email app with your answers filled in.

Email
info@aql-tech.com
Location
Riyadh, Saudi Arabia