Services

Security testing across your entire estate.

Twenty-six expert-led services covering applications, APIs, infrastructure, cloud and AI — every one of them delivered through the DERISK PTaaS platform with real-time findings, manual validation and on-demand retesting.

7 services

Application Security Testing

Web, mobile, desktop and API assessments, manually validated by certified testers.

Web Application Penetration Testing

Identify vulnerabilities in your web applications before attackers do.

Mobile Application Penetration Testing

Secure your Android and iOS applications against real-world attacks.

Desktop Application Penetration Testing

Identify vulnerabilities in your desktop applications before attackers do.

API Penetration Testing

Expose and fix vulnerabilities across your API endpoints.

REST API Penetration Testing

Expose and fix vulnerabilities across your REST API endpoints.

SOAP API Penetration Testing

Expose and fix vulnerabilities across your SOAP API services.

GraphQL API Penetration Testing

Expose and fix vulnerabilities across your GraphQL API endpoints.

5 services

Infrastructure & Network

External, internal, Active Directory and wireless testing across your estate.

Network Penetration Testing

Simulate real-world attacks across your external, internal, AD, and wireless networks.

External Network Penetration Testing

Simulate an attacker targeting your internet-facing systems from the outside.

Internal Network Penetration Testing

Assess what an attacker could achieve once inside your network.

Wi-Fi Network Penetration Testing

Evaluate your wireless networks for weak encryption, rogue access points, and configuration flaws.

Attack Surface Penetration Testing

Discover every exposed asset before attackers do.

5 services

Cloud Security

AWS, Azure and GCP assessments against CIS Benchmarks and provider best practice.

Cloud Security Assessment

Identify misconfigurations and risks across your cloud environments.

AWS Cloud Security Assessment

Identify misconfigurations and risks across your AWS cloud environment.

Azure Cloud Security Assessment

Identify misconfigurations and risks across your Azure cloud environment.

GCP Cloud Security Assessment

Identify misconfigurations and risks across your Google Cloud environment.

Security Configuration Review

Identify misconfigurations and harden your systems against attack.

1 service

AI & Emerging Technology

Security testing for AI models, LLM applications, agents and ML pipelines.

AI/LLM Penetration Testing

Secure your AI models, LLM applications, and ML pipelines against emerging threats.

4 services

Assurance & Code

Continuous scanning, code review and risk-based vulnerability management.

DAST

Continuous automated scanning of your live web applications.

Source Code Review

Catch vulnerabilities early in the development lifecycle.

Vulnerability Assessment

Systematic scanning to identify and prioritise known weaknesses.

Security Assessment

Comprehensive evaluation of your organisation’s security posture.

4 services

Response & Investigation

When something has already happened: contain it, understand it, prevent the repeat.

Incident Response

Rapid, expert-led response to contain and recover from security incidents.

Digital Forensics

Forensic investigation and analysis of digital evidence.

Malware Analysis

Reverse-engineer malware to understand its behaviour and impact.

Social Engineering

Test your human defences against phishing, vishing, and other manipulation techniques.

Where we work

Across the UAE and GCC.

Testing delivered from our Dubai base, with findings mapped to each market’s regulator.

Penetration testing in Dubai Penetration testing in Abu Dhabi Penetration testing in Sharjah Penetration testing in Saudi Arabia Penetration testing in Qatar Penetration testing in Kuwait Penetration testing in Bahrain Penetration testing in Oman

Not sure which assessment you need?

Tell us what you run and who regulates you. We will scope the right coverage in a single call.

Talk to our team ↗