From the Cyphlon team

Blog

Engineering write-ups, research notes and product releases from the people who build and test our tools.

What is PTaaS (penetration testing as a service)?

PTaaS delivers penetration testing as an ongoing service, not a one-off project. How it works, how it differs from a traditional pentest, and when it fits.

How much does a penetration test cost in the UAE?

What sets the price of a penetration test in the UAE: scope, depth, environment, regulator requirements and retesting, and how Cyphlon quotes per scope.

Do you need a penetration test for SOC 2?

SOC 2 does not strictly require a pentest, but auditors expect evidence for CC4.1 and CC7.1. What the criteria say and what a useful pentest report needs.

Book a call

Book a 30-minute call

Pick a time that suits you. We'll talk through what you're building and where your security stands, then suggest where to start.

Cyphlon

1:1 Consultation Call

30 min

Google Meet

An introductory call with our engineers about any engagement: a pentest, continuous testing, managed AppSec, security engineering, agentic AI security or a fractional CISO. We'll ask about your stack, your deadlines and what your customers or auditors expect, and tell you plainly if we're not the right fit.

Or open the booking page on Calendly

Get started

Talk to an engineer, not a salesperson.

30 minutes with the engineers who would do the work. We'll tell you what we'd test first, and whether you need us at all.

Book your free consultation

Free 30-minute consultation · Google Meet