Which cyber security services do you offer in Doha?
Key takeaways
- All work in Doha is delivered remotely unless a physical site survey is genuinely needed.
- Engagements are fixed-scope with a price band and a delivery date agreed in writing.
- Every assessment ends with a retest confirming which findings were closed.
- Every engagement is covered by a signed NDA and a rules-of-engagement document.
As of 3 November 2026: the service descriptions, prices and turnaround figures on this page are current.
What does the security environment in Doha look like?
Doha sits inside the Qatar regulatory perimeter, and The National Cyber Security Agency (NCSA) is the national incident response point, with the Ministry of Communications and Information Technology above it.
Law No. 13 of 2016 concerning privacy and protection of personal data, and the national cyber security law that established the NCSA, are the two instruments a Qatar entity works within.
Those instruments set the baseline a client has to meet. Our job is to test against that baseline and against the framework the client has chosen, and to report what we find in terms the client can act on.
Which services are available in Doha?
- VAPT & Penetration Testing
- Hire an Ethical Hacker
- AI-Driven Ethical Hacking
- Web Application Security
- Mobile App Security Testing
- API Security Testing
- Network Penetration Testing
- Cloud Security Assessment
- Incident Response & Retainer
- Ransomware Recovery & File Unlock
- Website Malware Removal
- Deepfake & AI Abuse Protection
- Digital Forensics & Evidence
- Account Recovery & Data Recovery
Which other locations in Qatar do you cover?
How does an engagement run in Doha?
Scoping, authorisation, testing, reporting, remediation and a retest. The first two happen in writing before anything is touched, and the retest at the end confirms which findings were closed rather than assuming they were. You get the same six stages whether the engagement is in Doha or anywhere else, and you get a live finding log while the work is in flight.
What does a security engagement cost in Doha?
Engagements are quoted in Indian Rupees and can be settled in QAR or USD; the currency and any applicable withholding are confirmed in the written quote. The bands below are the indicative ranges for a typical scope of each type; the final figure depends on the number of assets, the depth of authentication, the number of environments, and whether remediation support is included.
| Engagement | Indicative range | Typical timeline |
|---|---|---|
| Static website penetration test | Rs 40,000 - 90,000 | 3-5 working days |
| Web application penetration test | Rs 1,20,000 - 3,50,000 | 7-12 working days |
| Mobile app security test (per platform) | Rs 1,00,000 - 3,00,000 | 7-10 working days |
| API penetration test (50-150 endpoints) | Rs 1,00,000 - 4,00,000 | 8-15 working days |
| External network penetration test | Rs 60,000 - 2,00,000 | 5-8 working days |
| Internal network and Active Directory test | Rs 1,50,000 - 6,00,000 | 10-20 working days |
| Cloud configuration security review | Rs 1,00,000 - 3,50,000 | 5-10 working days |
Which regulations apply to a business in Doha?
Law No. 13 of 2016 concerning privacy and protection of personal data, and the national cyber security law that established the NCSA, are the two instruments a Qatar entity works within.
This is general guidance about which instruments are in force, not advice about how your organisation should comply with them. We confirm the instruments that bind your entity in the written scope, and we recommend you take your own legal advice on the obligations that follow.
What are the common questions about cyber security in Doha?
Get a quote for work in Doha
Tell us what you need tested and we will come back with a written scope, a fixed price band and a delivery date.
Request a quote See pricingLast reviewed: 3 November 2026. Information on this page is general guidance, not legal advice. Prices are indicative bands for a typical scope and are confirmed in a written quote before any work begins.