Company
AQIRA is built by AQSEC
AQSEC is a cyber security consultancy and training company whose consultants test web apps, APIs, mobile apps, cloud and networks and write the reports clients sign off. AQIRA puts that way of working into software.
Based in Lahore, delivering across Pakistan, the GCC, the UK, the EU and the US.
For anything else, contact the team.
Why AQIRA
Between the annual penetration test and the scanner
An annual penetration test describes an estate as it stood that week. A scanner runs more often but hands the team possibilities to disprove.
AQIRA's six agents assess the inputs you own on the schedule you set, prove findings with benign proof, and write the report as a consultant would. The console shows the evidence the report is written from.
See how the platform works, or read the methodology.
Four rules that shape the product
They come from the consulting work and decide what AQIRA should do.
Evidence before adjectives
A finding carries its proof, steps to reproduce and a defensible severity. Every claim here is something the product does or the methodology states.
The report is the deliverable
An assessment that ends in a raw export is not finished. Every report is written for an engineer and a board, from the same evidence.
Say where it stops
Each input's page says what it does not cover; the methodology lists the limits common to all. A clean result covers only what was tested.
Ask for the least access
Read-only wherever an input allows it, granted and revocable in your own console. Nothing active runs until the operator confirms authorisation for the target.
AQSEC
The company behind it
AQSEC tests, builds detection, responds to incidents and trains the teams that live with the result.
Offensive security
Penetration testing across web, mobile, API and network, and adversary simulation.
Detection engineering
Detections written as code and mapped to MITRE ATT&CK.
Incident response
Retained and emergency response, from containment to the report.
Cloud and infrastructure
AWS, Azure, GCP and Kubernetes, reviewed as they are configured.
GRC and assurance
Readiness for ISO 27001, PCI DSS and SOC 2, run as engineering work.
Training
Programmes taught by the consultants who run the engagements.
For your supplier assessment
AQSEC shares these in writing, on request.
- Company registration
- Answers to your security questionnaire
- References
Ask for a security review through the contact form, or email hello@aqsec.co. How AQIRA handles the access you give it is on the security page.
Next step
A demo with the team behind AQIRA
A demo runs one assessment in the console, with demo data: the agents at work, the evidence behind each finding, and the report.