Reliant is a Saudi penetration-testing-as-a-service (PTaaS) platform based in Riyadh and licensed by the National Cybersecurity Authority (NCA). Our researchers manually test your web applications, APIs, mobile apps and external assets the way a real attacker would, and you pay only if we confirm a Critical or High finding.
Manual testing of your web application: authentication, access control, business logic and injection.
Manual testing of REST and GraphQL APIs: authorization, tokens, mass assignment and usage limits.
Manual testing for iOS and Android apps and the backend API they rely on.
Everything your organization exposes to the internet, in one penetration test.
Many breaches start from a system exposed to the internet: a flaw in an application, an API or a forgotten server. Regulators expect evidence of penetration testing, and your customers and partners expect your systems to have actually been tested. Reliant gives you that evidence through manual testing by Saudi researchers and pricing tied to the outcome.
Automated scanners catch known patterns and miss what really matters: business-logic flaws, access-control bypasses and exploit chains. Our researchers test your systems by hand, and every finding is reviewed, verified and reproduced before it reaches you.
Testing is carried out by Saudi penetration testers ranked among the top 10 on bugbounty.sa, the Saudi Federation's national vulnerability-discovery platform. Together, the four co-founders have more than 3,900 documented findings, and one of them ranked #1 on bugbounty.sa in Q1 2026. Their record also includes Best Report at Black Hat 2025 and 1st place at Black Hat MEA 2024 (Bug Bounty Jr).
There is no invoice unless we confirm at least one Critical or High finding; then you pay the program's agreed budget as a single amount. If we confirm none, the test and its report are delivered free.
Reports are documented in line with the Essential Cybersecurity Controls (ECC) issued by the National Cybersecurity Authority and the Saudi Central Bank's Cyber Security Framework (SAMA CSF), helping you evidence to auditors that you meet the penetration-testing requirements.
We test the external systems an attacker can reach from the internet. Take one service or all of them; each is scoped and priced on its own. In every service we also cover cross-cutting areas that automated tools usually miss.
We test the business logic, session management, authentication and user permissions in your application. For example, we look for SQLi, XSS and SSRF, file uploads without proper validation, and sessions that stay valid after logout.
We test the REST and GraphQL APIs your apps and partners rely on: object-level and function-level authorization, changing protected fields through mass assignment, and excessive data in responses. For GraphQL, we also check schema exposure through introspection and field-level authorization.
We test iOS and Android apps together with the backend APIs they talk to. We examine sensitive data stored on the device, how the connection to the server is secured, keys and secrets embedded in the app, and whether the server relies on in-app controls that can be bypassed by talking to it directly.
Web applications, APIs and mobile apps together, plus your external assets: subdomains and public IP addresses. We look for forgotten services and exposed admin panels, and chain findings together the way a real attacker would.
We test JWT tokens and OAuth and SSO flows: token signing and validation, redirect URIs, password recovery and multi-factor authentication, looking for any way to sign in as another user or take over their account.
Flaws automated tools do not catch: tampering with prices and quantities, reusing coupons and balances, skipping mandatory steps such as payment or verification, and race conditions in financial operations.
We verify that every user reaches only what belongs to them, looking for horizontal access to other users' data through IDOR, vertical escalation to admin privileges, and weak separation between customer accounts in multi-tenant systems.
The researcher starts by understanding your system: who uses it and which data and operations matter most. They then test it by hand with a real attacker's mindset, guided by recognized standards without stopping at checklists, and chain small weaknesses into exploits that show their real impact on your business. Every finding is reviewed, verified and reproduced before delivery, so you never receive unconfirmed automated results. Throughout the test we stay within the signed rules of engagement and the agreed time windows, testing your production environment without disrupting your operations.
Send us the systems you want tested, or book a 30-minute consultation with a lead penetration tester who helps you choose the right service and define the scope.
You create a program on the platform that sets the in-scope and out-of-scope assets and the rules of engagement: testing windows, forbidden techniques such as denial of service (DoS), rate limits and escalation channels, along with a suggested budget.
Reliant reviews the scope and agrees the budget with you. The program runs under Reliant's standard Engagement Agreement, or under your own contract once Reliant accepts it, and an NDA is signed before any testing starts.
The assigned researchers test your systems, and Reliant triages and verifies every submission. An approved Critical or High finding can be sent to you immediately, ahead of the report, so you can start fixing early.
You receive the report with every approved finding. You discuss each finding with Reliant through comments, and you may be asked for your view on it as part of the Company review.
After fixing, you request a free retest while the program is in its report or retest stage, and you get the result as soon as the check is done.
Reliant's pricing is outcome-based. If we confirm at least one Critical or High finding, the fee is the program's agreed budget: one amount for the whole engagement, with no per-finding charge and no hidden fees, and the invoice is issued automatically with the report. If we confirm no Critical or High, the invoice is zero and the test and its report are delivered free. The price depends on scope size (how many applications and APIs), testing depth and timeline.
Share your requirements or book a 30-minute consultation with a lead penetration tester. You pay only if we confirm a Critical or High finding.
