ZeroFlare (0flare.com) is a penetration testing firm with offices in Doha, Qatar and Marseille, France. The legal name is ZeroFlare LLC. The work is authorized penetration testing and security assessment. The standard is the same in both offices: written scope, evidence, and a report that engineering and leadership can both use.
Mission
Help an organization see its real exposure, and leave it with a priority order rather than a pile of unconfirmed output. We would rather decline an engagement than pretend we can test something we were not given access to, or something nobody is allowed to authorize.
Two offices
We work from Doha and Marseille. Clients in the Gulf, in Europe, and between the two get the same method. The city changes. The rules of engagement do not.
New engagements go through the contact page. The Doha phone is +974 5066 5151. The mailbox is hello@0flare.com.
How an engagement starts
You describe the system and the question. We say which service fits, or that none of them do. Scoping names the assets, the objective, the environment, the accounts, the window, and a person who can stop the work. Testing does not start on a handshake. The methodology is the longer version of that sentence.
The people who test write the findings. There is no separate factory that turns notes into a report the tester has not read.
Who we work with
Software companies, operators, and teams who are about to face a customer review or who already know they need an independent test. We are useful when someone has to be able to explain, later, what was tested and what was found. We are a poor fit when the thing being purchased is a logo for a questionnaire.
What we are not
We are not a monitoring service, and we are not a tool vendor. We do not certify you against a framework. Where a framework is useful, we will map findings to it and say clearly that the mapping is not an audit opinion. We are not a PASSI-qualified provider. We do not claim an accreditation from Qatar’s National Cyber Security Agency or from any other body. Those sentences are also on the office pages, because they are the sentences buyers actually ask.
We also do not sell fear. If the honest result of a test is that the important paths held, the report will say that.
What we will not invent
There is no client list on this site, no headcount, no certification wall, and no case study written to sound specific without naming anyone. The home page can show credentials. That section stays off until the credentials are real. Social profiles are not linked until the profiles exist. An empty list in the site configuration is deliberate. Adding a URL there is how a real profile gets into the markup. Inventing one is not.
If you want to know whether we are the right firm, the contact page is the way to find out. A short conversation is enough.