- PHP2Shell: critical PHP RCE (CVE-2026-109618, CVE-2026-109619) actively exploited. Patch within 24 hours and block 665 IOCs
Defending tomorrow. Moving today.
Managed SOC and MDR, offensive testing, incident response, GRC and AML/CFT advisory, and specialist talent for government, financial institutions and enterprises in Qatar.
- 24/7 SOC and MDR
- QCB, NCSA and PDPPL expertise
- Arabic and English
- QCB regulations
- NCSA National Information Assurance
- PDPPL
- ISO/IEC 27001
- ISO 22301
- FATF
- MITRE ATT&CK
- OWASP
AI accelerates the work. Analysts keep control.
Our security operations centre puts AI to work on the volume, so experienced analysts can spend their time on the decisions that matter.
- 01See every signal, 24/7
- 02AI accelerates, analysts decide
- 03Governed in 90 days
What attackers are doing right now
Live open-source threat intelligence, refreshed throughout the day.
PHP2Shell: critical PHP remote code execution flaws under attack
CVE-2026-109618 and CVE-2026-109619 give unauthenticated attackers code execution on PHP web servers back to PHP 5.4, and exploitation began before patches existed. Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 within 24 hours, hunt back to 17 October, and block our 665 published indicators.
Eight practices. One accountable team.
Operations, advisory and people under one engagement, so closing a finding never means coordinating three vendors.
Managed Security Services
A 24/7 security operations centre, run from Doha, that detects, investigates and contains threats across your endpoints, network, cloud and identities.
Offensive Security and Testing
Find the weaknesses an attacker would use before they do.
03Threat Intelligence and Incident Response
Know who is targeting you and have a team ready when it happens.
04Cyber Security Consulting
Strategy, frameworks and resilience, from current state to roadmap.
05Governance, Risk and Compliance
Programmes built around the Qatari laws and regulations that apply to you.
06Financial Sector Consultancy
Financial crime and governance advisory for banks, insurers and fintechs.
07Outsourcing and Staff Augmentation
Vetted specialists placed in your team for a project or for the long term.
08Specialised Solutions
Technology built for Arabic-language and regulated environments.
Every service, in detail
Choose a practice to see exactly what we deliver.
Security and technology news
19 products across security, IT and compliance
Implemented, integrated and supported by our team, and configured for how your sector is regulated.
Security Operations
- SIEM
- SOAR
- Case Management
- Cyber Forensics
Detection and Response
- EDR
- NDR
- XDR
Exposure Management
- Attack Surface Management
- Automated Penetration Testing
- Vulnerability Scanning
- Breach and Attack Simulation
IT Operations
- IT Service Management
- Asset Management
Governance and Resilience
- GRC Platform
- Financial Crime Monitoring
- Crisis Management
AI and Automation
- AI Agents
- Automation
- Arabic OCR
From first assessment to running operations
Assess
Where you stand against your regulator's requirements and your real threat exposure.
Design
A prioritised plan with the controls, policies and technology that close the gaps.
Implement
Our consultants and engineers deliver it with your team, not beside it.
Operate
Managed services and placed specialists keep it working after go-live.
Where the regulatory and security stakes are highest
Government
GRC, managed SOC, Arabic OCR
Banking
AML/CFT, MDR, regulatory compliance
Fintech and payments
AML/CFT, GRC platform, VAPT
Insurance
GRC consulting and platform
Healthcare
Data protection, managed SOC
Telecom
MDR, threat intelligence
Energy
Managed SOC, GRC, incident response
Retail
VAPT, staff augmentation
Local regulatory knowledge, backed by real operations.
Most firms either advise or operate. We do both, which means the controls we recommend are the ones we know how to run.
More about Tech PaceBuilt for Qatar
We work to QCB, NCSA and PDPPL requirements, not generic global templates.
Advisory and operations
One team designs the programme and runs it day to day.
Arabic first
Bilingual analysts, documentation and technology, including Arabic OCR.
People when you need them
Specialists placed in your team to fill gaps quickly.
Working with the platforms you already trust
Tell us what your regulator, auditor or board is asking for.
We will come back to you with how we would approach it, who would work on it and what it would take.