Field notes
Case studies, hardening guides and compliance explainers from Sumrite penetration testers. No scanner dumps.
The Critical Systems Cybersecurity Controls set exact testing frequencies: monthly vulnerability assessments and penetration tests at least every six months.
By Niyaz Khan4 min read
Saudi Arabia's PDPL is in active enforcement. What the 48 SDAIA decisions penalised, the fine ceiling, the response deadlines and a 90-day readiness plan.
By Nishant Sharma4 min read
Annual under the SAMA CSF, twice a year under the CRFR: which rule applies to you, what to scope and the evidence a SAMA examiner expects.
By Niyaz Khan4 min read
We sent Origin: evil.com and the API echoed it back with credentials allowed. Why that matters and how to fix it in every common stack.
By Niyaz Khan10 min read
Five red teaming providers in India compared, how red teaming differs from VAPT, what an engagement looks like and the questions to ask before you hire.
By Faisal Khan7 min read
Testing days, reporting and retest: realistic penetration test timelines by scope, and how Sumrite delivers a scoped web or API report in 48 hours.
By Faisal Khan1 min read
Scope, methodology, findings, retest letter and criteria mapping: what goes into a SOC 2 penetration test report and what your auditor looks for.
By Nishant Sharma9 min read
Control 2-11 of the NCA Essential Cybersecurity Controls explained: what must be tested, how often, and what evidence an assessor expects.
By Niyaz Khan6 min read
Talk to a tester
Scoped quote within a day. Expert-led testing, verified findings, a fix-and-retest cycle and a report your auditors can use as evidence.