Security capability you own.
We offer a 360° security approach with diverse expertise spanning offensive security, governance, risk management, critical infrastructure protection and compliance.
Our teams work from initial assessment through to day-to-day operation, then hand over to yours.
A 360° approach
From offensive audits to governance, every engagement is documented and handed over to your teams. Quoted after a scoping review. Offers & pricing →
Audit & offensive security
Network, web and API penetration testing. Red team. Social engineering. Configuration and architecture audit. Deliverables your teams can act on immediately.
Learn more →Security integration
Deployment and configuration of network, endpoint, application and access security solutions. Operational documentation and handover to internal teams.
Learn more →Advisory
Security programme management, infrastructure redesign, secure development, remediation, SOC and CERT projects. Advisory role, not execution.
Learn more →Governance & compliance
Maturity assessment, compliance, cyber strategy, business impact analysis and shared CISO. ISMS aligned with ISO/IEC 27001:2022, certification underway.
Learn more →Our platforms
What we operate and publish to carry our engagements forward over time.
AarSOC
Managed SOCContinuous detection, investigation and incident response by the CyberAar team, operated by us or in your own environment.
Discover AarSOC →AarView
Licensed softwareThe security orchestrator that installs above your SIEM: incidents, automation under approval, reports.
Discover AarView →AarMe
Bug bountyOur bug bounty platform: researchers test organisations' exposed services, and only confirmed vulnerabilities are rewarded.
Discover AarMe →aartool
Open sourceOur hardening and compliance audit tooling, published under a free licence.
See our tools →What sets us apart
Three claims, and for each one the place to check it.
Expertise
A team of specialists trained on critical environments, capable of intervening at every stage of your security, from detection to response.
Our technical publications →Sovereignty
Your data stays within the perimeter you choose. No dependency on a foreign vendor or hyperscaler. You keep control.
Our deployment models →Distributed team
Present across four time zones, from our Dakar headquarters to Montreal. Operated 24/7 from general availability; during the pilot, 06:00-24:00 WAT on business days with on-call for critical alerts.
The pilot programme →Publications
Research
What we measure while building and running our own platform.
Our failover had never worked, and every dashboard was green
A VRRP pair that never moved its floating IP for two months, and the two other controls we found lying the same day.
CIS and Docker contradict each other, so decide in writing
CIS says disable IP forwarding. Docker depends on it. Applying the control breaks the platform; skipping it quietly makes the compliance report lie.
fail2ban locked us out of the whole estate, and it was right
An SSH agent holding several keys exhausts MaxAuthTries before offering the right one. Run in parallel, every node bans you at the same moment.
Pilot program open
Test AarSOC with no commitment
The pilot programme opens the Citadelle level (without the AI assistant) to five organisations for six months, at no charge, with guided deployment and priority support. Closing date: 2 January 2027.