CREST/OSCP-led testing across infrastructure, web, mobile, cloud and APIs.
Offensive security testing against your external, internal, web, mobile, API, cloud and wireless attack surface — executed by certified testers (OSCP, OSCE, CREST) with clear, actionable reporting.
Visionary entrepreneur with 18+ years of global techno-consulting and enterprise-transformation experience. Founded MAST Consulting Group in 2016 as a self-funded UAE startup (MAS Tech Consulting) and has since grown it into a regional consulting force spanning UAE, India and Greece — adding MAS Tech General Trading and MAST Advisory Services along the way.
Context, scope, delivery and impact — written for buyers, boards, auditors and search engines alike.
Vulnerability assessment and penetration testing (VAPT) is now an explicit requirement across PCI DSS v4.0.1 (Req 11), CBUAE IS Regulation, SAMA CSF, NCA ECC, ADHICS V2, RBI CSF, SEBI CSCRF, ISO 27001 (A.8.8, A.8.29) and SOC 2 (CC4.1, CC7.1) — typically annually plus after significant change.
Testing types include external network, internal network, web application (OWASP Top 10, OWASP API Top 10), mobile (iOS, Android, OWASP MASVS), API (REST, GraphQL, SOAP), cloud configuration (AWS, Azure, GCP, OCI, Kubernetes), wireless, social engineering (phishing, vishing, physical), Active Directory and identity, segmentation testing (PCI Req 11.4.5), purple-team and red-team simulations aligned to MITRE ATT&CK.
Tested by certified offensive security practitioners (OSCP, OSEP, OSWE, OSCE, CREST CCT/CRT, GPEN, GWAPT).
Exploit-proven findings with clear remediation steps, an attestation letter accepted by regulators, customers, insurers and certification bodies, and measurable reduction in exploitable surface area.
A visual breakdown of how the engagement runs, what evidence we leave behind, and the business outcomes you can defend at the board.
Targets, rules of engagement, success criteria.
OWASP, PTES and OSSTMM-aligned testing.
Executive summary plus technical report with PoCs.
Validation of remediated findings.
What a credible VAPT engagement delivers — aligned to OWASP, PTES, OSSTMM and CREST / OSCP methodologies.
Targets, timing, exclusions, escalation contacts and success criteria signed off.
OWASP WSTG / MASTG, PTES, OSSTMM or CREST methodology selected per engagement type.
Where applicable, both perspectives covered — including privileged user roles.
Each issue backed by a proof-of-concept demonstrating real impact.
Standardised severity scoring with environmental adjustments.
Board summary plus a developer-actionable technical report with remediation guidance.
Confirmation testing within the engagement window.
Signed letter summarising scope, methodology, dates and outcome for clients and regulators.
No false positives — every issue ranked by demonstrated impact.
OSCP / OSCE / OSWE / CREST-qualified consultants only.
External, internal, web, mobile, API, cloud, wireless and social engineering.
Satisfies PCI DSS 11.4, ISO 27001 A.8.29 and CBUAE / SAMA / NCA testing requirements.
Confirmation of fixes built into the engagement, not billed separately.
Signed letter accepted by enterprise buyers and regulators.
External and internal infrastructure, web application, mobile (iOS/Android), API, cloud (AWS/Azure/GCP), wireless, social engineering and red team simulations.
Yes — a signed attestation summarising scope, methodology and outcome is included with every engagement.
Yes — every consultant holds at least OSCP. Senior testers hold OSCE, OSWE, OSEP, CRTO and / or CREST CRT / CCT credentials.
Web app: 5 to 10 working days. External infra: 3 to 7 days. Mobile: 7 to 12 days. Red team: 4 to 8 weeks. We confirm at scoping based on attack surface size.
We run pentests against production with agreed rules of engagement and rate limits. Where impact risk is material we test in pre-prod and validate any safe checks in production.
Yes — one round of re-testing for remediated findings is included in every engagement within 60 days of report delivery. Additional rounds are quoted separately.
Yes — our reports meet PCI DSS 11.4, ISO 27001 A.8.29, SOC 2 CC4.1 and CBUAE / SAMA / NCA testing requirements, with the attestation letter accepted by enterprise buyers and auditors.
Yes — annual retainers with quarterly tests, bug-bounty triage and on-call validation are available at preferential rates.
Most clients combine this engagement with one or more of the services below — a natural next step once foundations are in place.
Independent technical and process audit of your security controls.
QSA-aligned readiness, RoC support and SAQ guidance.
Court-admissible forensics and 24×7 incident response.
Strategy, testing and 24×7 monitoring led by certified practitioners.
Direct links into the relevant clauses, controls and regulator obligations covered by this engagement.
Methodology, deliverables, week-by-week timeline, pricing models, industry context, tooling and extended FAQs — each on its own page for fast reference and deep linking.
Tell us a little about your business — a senior consultant will reach out within one business day.
