ZeroFlare (0flare.com) tests from Doha as well as from Marseille. The Doha office is for organizations that want an authorized penetration test or security assessment scoped with someone in Qatar, against the same written rules the firm uses everywhere else.
The office
The address is M7, Abdulla Bin Thani St, Doha, Qatar. Call +974 5066 5151. Email hello@0flare.com. A consultation starts on the contact page. We do not keep a separate process, a separate report template, or a separate definition of “in scope” for this office. If a system is not named in the rules of engagement, it is not tested, whether the conversation happened in Doha or anywhere else.
What buyers in Qatar usually need
The request is rarely “hack something.” It is usually one of four questions. A software company wants a web application or API test before a customer review. An operator wants to know what an external or internal network test shows from a position they can authorize. A team running production in a cloud account wants a cloud security assessment of the accounts they actually use. A team facing a questionnaire wants a vulnerability assessment with the findings mapped to a control set they can point at.
We will say which of those matches the sentence you were asked. We will also say when the sentence is asking for a certificate we do not issue.
Rules that come up in Qatar
Several public frameworks are part of the conversation. They are context for scoping. They are not badges on this page.
The National Cyber Security Agency publishes the National Information Assurance policy and related guidance that government and critical organizations are expected to align with. A penetration test can produce evidence against a control you name from that material. It does not replace the agency’s own assessment, and ZeroFlare is not claiming an accreditation from the agency.
Financial institutions hear from the Qatar Central Bank. Sector cybersecurity instructions are the bank’s, not ours. If you want findings read against a control the bank’s guidance names, bring the control. The report will map gaps. It will not say the bank is satisfied.
Law No. 13 of 2016, the Personal Data Privacy Protection Law, matters when a test might touch personal data. The practical effect on an engagement is the same rule we use everywhere: we capture the minimum evidence required to prove an issue, and we do not take a copy of a customer database to make a point. The privacy policy on this site describes what the website itself collects. An engagement’s data handling is in the contract.
None of these paragraphs is legal advice. If your counsel reads an obligation differently, their reading wins, and the scope should quote it.
How an engagement runs from Doha
Scoping names the assets, the objective, the environment, the accounts, the window, and a person on your side who can stop the work. The methodology is the detail. Testing stays inside that writing. The report has a technical half and a short half, and a retest follows the fixes you ship. Language for the report is English unless the contract says otherwise. security.txt lists English, French, and Arabic as languages we will accept for a disclosure report about our own systems. That line is not a promise that every engagement document exists in Arabic.
What this page is not
This is not a directory listing stuffed with “penetration testing Qatar” and nothing else. The services are the ones linked above. The proof of a test is the report from that test, not a slogan about the Gulf. We do not publish client names, headcount, or certification marks. The trust section on the home page stays off until there is something real to put in it.
If you are in Doha, or you buy from Doha for a team elsewhere in the Gulf, start with what you need tested. Saudi Arabia, the UAE, Kuwait, Bahrain, and Oman show up in the same conversations. The constraint is authorization, not the stamp in the passport. We test systems the owner can authorize. A request to look at someone else’s environment is not an engagement, from this office or the Marseille office.