Field notes
Case studies, hardening guides and compliance explainers from Sumrite penetration testers. No scanner dumps.
How to fit expert penetration testing into a CI/CD pipeline: release-triggered tests, what to test each release, pipeline and Kubernetes security and verified retests.
By Faisal Khan2 min read
Microsoft-IIS/10.0 and Microsoft-HTTPAPI/2.0 both reveal your stack. They come from different layers and need different fixes. Here are both.
By Niyaz Khan10 min read
A VAPT is more than a scan. Here is every component of a VAPT engagement, from scoping and NDA to manual testing, the report, remediation and retest.
By Faisal Khan2 min read
PCI DSS names it, SOC 2 and ISO 27001 expect it, GDPR implies it. A guide to what each framework says about penetration testing.
By Faisal Khan1 min read
Black, grey or white box? What each approach means, how it changes for web, mobile, API, network and cloud testing, and which one to choose.
By Niyaz Khan11 min read
A practical 10-point checklist for choosing a penetration testing provider in Saudi Arabia, plus what actually drives the price in Riyadh, Jeddah and Dammam.
By Faisal Khan4 min read
PTaaS and traditional penetration testing compared on cadence, reporting, retests, developer workflow and compliance evidence, and when each one is the right fit.
By Faisal Khan1 min read
Secure, HttpOnly, SameSite Strict, Lax or None: what each flag does, which one each cookie should use, and how to set them in your stack.
By Niyaz Khan8 min read
VAPT explained in plain language: the difference between VA and PT, the types of testing, how an assessment runs, what it costs and when you need one.
By Faisal Khan9 min read
Five VAPT service providers in India compared on services, credentials and best fit, with a buyer's checklist and the questions to ask before you sign.
By Faisal Khan8 min read
PTaaS delivers expert-led penetration testing continuously through a platform, with live findings, Jira and GitHub sync, on-demand retests and audit-ready reports.
By Faisal Khan2 min read
VAPT pricing follows effort, not tools. Learn what drives cost, how to compare quotes and why a cheap scan-only report costs more later.
By Faisal Khan1 min read
Talk to a tester
Scoped quote within a day. Expert-led testing, verified findings, a fix-and-retest cycle and a report your auditors can use as evidence.