Cyber START
- Vulnerability Assessment
- External Security Review
- Basic Web Security Assessment
- Security Report
- Management Meeting
HomeServices
Service catalogueThe Wethaq service catalogue
Twelve integrated service areas — from security consulting and testing to managed operations, infrastructure, cloud, digital transformation and training. Every engagement is scoped to your environment and quoted through a tailored proposal.
Cybersecurity Consulting & GRCCybersecurity Assessment & CompliancePenetration Testing & Red TeamSOC-as-a-ServiceNOC-as-a-ServiceIncident Response & Digital ForensicsNetwork, Infrastructure & Physical SecurityData Center & CloudDigital TransformationITSM & IT OperationsTraining & Cybersecurity AwarenessvCISO & Managed Security Services
Integrated packages
Commercial Cyber packages
Four ready packages covering the range from first assessment to critical infrastructure. Tailored to your environment and delivered with a detailed proposal.
Cyber BUSINESS
- Vulnerability Assessment
- External Pentest
- Web Application Test
- Firewall Review
- Network Security Review
- Executive Report
- Technical Report
- Remediation Workshop
- Retest
Cyber ENTERPRISE
- External Pentest
- Internal Pentest
- Web, API & Network testing
- Active Directory review
- Firewall review
- Vulnerability Assessment
- Security Architecture Review
- Risk Assessment
- Executive Board Report
- Retest
Cyber CRITICAL
- External, Internal, Web, API & Mobile testing
- Active Directory, Network & Cloud testing
- Red Team
- Threat Hunting
- Security Architecture
- SOC Assessment
- Incident Response Readiness
- Executive Risk Report
01 / 12
Cybersecurity Consulting & GRC
Policies, governance programmes, risk registers, BCP/DRP and ISO 27001 implementation — the management layer of security.
Governance, Risk & Compliance (GRC)11
GRC-001Cybersecurity Policy PackageGRC-002Information Security PolicyGRC-003Incident Response PolicyGRC-004Access Control PolicyGRC-005Backup PolicyGRC-006BCP (Business Continuity Plan)GRC-007DRP (Disaster Recovery Plan)GRC-008Incident Response PlanGRC-009Risk Register DevelopmentGRC-010Cybersecurity Governance ProgramGRC-011ISO 27001 Implementation
02 / 12
Cybersecurity Assessment & Compliance
NIST CSF 2.0, ISO 27001 gap and readiness, maturity, risk, cloud, data and third-party assessments, plus security audits.
Cybersecurity Assessment15
AS-001Cybersecurity Quick AssessmentNIST CSF 2.0AS-002Cybersecurity Baseline AssessmentNIST CSF 2.0AS-003Full Cybersecurity AssessmentNIST CSF 2.0AS-004Enterprise Cybersecurity AssessmentNIST CSF 2.0AS-005NIST CSF 2.0 AssessmentNIST CSF 2.0AS-006ISO 27001 Gap AssessmentISO/IEC 27001AS-007ISO 27001 Readiness AssessmentISO/IEC 27001AS-008Cybersecurity Maturity AssessmentCMMI / NISTAS-009Cyber Risk AssessmentISO 27005AS-010IT Risk AssessmentISO 27005AS-011Third-Party Security AssessmentISO 27001AS-012Critical Infrastructure AssessmentNIST CSF / IEC 62443AS-013Security Architecture AssessmentSABSA / TOGAFAS-014Cloud Security AssessmentCSA CCMAS-015Data Security AssessmentISO 27001
Security Audit9
AU-001IT Security AuditAU-002Network Security AuditAU-003Firewall AuditAU-004Active Directory AuditAU-005Microsoft 365 Security AuditAU-006Cloud Security AuditAU-007Backup Security AuditAU-008DR Security AssessmentAU-009Security Policy Audit
Deep dives
03 / 12
Penetration Testing & Red Team
Web, API, mobile and network penetration testing, Red Team operations and vulnerability assessment — think like the attacker first.
Web Application Penetration Testing4
PT-W01Small Web ApplicationOWASP WSTGPT-W02Medium Web ApplicationOWASP WSTGPT-W03Enterprise Web ApplicationOWASP WSTGPT-W04Complex / Critical Web PlatformOWASP WSTG
API Penetration Testing6
PT-A01Basic APIPT-A02Standard APIPT-A03Complex APIPT-A04Enterprise API PlatformPT-A05API Gateway AssessmentPT-A06Microservices Security Assessment
Mobile Application Security Testing4
PT-M01AndroidPT-M02iOSPT-M03Android + iOSPT-M04Mobile Backend + API
Network Penetration Testing11
PT-N01Small NetworkPT-N02Medium NetworkPT-N03Enterprise NetworkPT-N04Large Government NetworkPT-N05External Network PentestPT-N06Internal Network PentestPT-N07External + InternalPT-N08Active Directory Security AssessmentPT-N09Firewall AssessmentPT-N10Wireless Security AssessmentPT-N11VPN Security Assessment
Red Team Operations5
RT-001Red Team Mini EngagementRT-002Standard Red TeamRT-003Enterprise Red TeamRT-004Critical Infrastructure Red TeamRT-005Purple Team Exercise
Vulnerability Assessment5
VA-001Up to 25 AssetsVA-00226–100 AssetsVA-003101–250 AssetsVA-004251–500 AssetsVA-005500+ Assets
04 / 12
SOC-as-a-Service
24/7 security operations in four service tiers, plus SOC design, build and transformation.
SOC-as-a-Service4
SOC-001Starter SOCSOC-002Business SOCSOC-003Enterprise SOCSOC-004Critical SOC
SOC Setup & Build5
SOC-S01Small SOC BuildSOC-S02Medium SOC BuildSOC-S03Enterprise SOC BuildSOC-S04Government SOC BuildSOC-S05SOC Transformation
Hardware and licences are not included in SOC/NOC/network services unless explicitly stated in the proposal.
Deep dives
05 / 12
NOC-as-a-Service
Network operations as a service: monitoring, fault, capacity and availability management under SLA.
NOC-as-a-Service4
NOC-001Basic NOCNOC-002Business NOCNOC-003Enterprise NOCNOC-00424/7 Critical NOC
Hardware and licences are not included in SOC/NOC/network services unless explicitly stated in the proposal.
06 / 12
Incident Response & Digital Forensics
Incident response plans and readiness, plus digital forensics for evidence-grade investigations.
Incident Response7
IR-001Incident AssessmentIR-002Malware InvestigationIR-003Compromise AssessmentIR-004Digital ForensicsIR-005Ransomware ResponseIR-006Major Cyber IncidentIR-007Emergency IR Retainer
Digital Forensics6
DF-001Computer ForensicsDF-002Mobile ForensicsDF-003Server ForensicsDF-004Cloud ForensicsDF-005Network ForensicsDF-006Enterprise Investigation
07 / 12
Network, Infrastructure & Physical Security
Network design and implementation, CCTV and physical security, and structured cabling.
Network Design7
ND-001Small Network DesignND-002Medium EnterpriseND-003Large EnterpriseND-004Government Network DesignND-005Data Center Network DesignND-006SD-WAN DesignND-007Network Segmentation
Network Implementation8
NI-001Router ConfigurationNI-002Switch ConfigurationNI-003Firewall DeploymentNI-004VPN DeploymentNI-005VLAN ImplementationNI-006Network MigrationNI-007Firewall MigrationNI-008Data Center Network Implementation
CCTV & Physical Security6
CCTV-001CCTV AssessmentCCTV-002CCTV DesignCCTV-003Network + CCTV DesignCCTV-004Large CCTV DesignCCTV-005Installation ManagementCCTV-006Security Hardening
Structured Cabling6
SC-001Site SurveySC-002Cabling DesignSC-003Fiber DesignSC-004Full Infrastructure DesignSC-005Project ManagementSC-006Cat6 Point Implementation
Hardware and licences are not included in SOC/NOC/network services unless explicitly stated in the proposal.
08 / 12
Data Center & Cloud
Data-centre design, cloud services and virtualisation — built for availability, control and cost.
Data Center9
DC-001Data Center AssessmentDC-002Data Center DesignDC-003Small DC ImplementationDC-004Enterprise DCDC-005Virtualization DesignDC-006VMware ImplementationDC-007Proxmox ImplementationDC-008Backup InfrastructureDC-009Disaster Recovery Design
Cloud Services7
CL-001Cloud Readiness AssessmentCL-002Cloud ArchitectureCL-003Cloud Migration PlanCL-004Cloud MigrationCL-005Cloud SecurityCL-006Hybrid CloudCL-007Cloud DR
Virtualization6
VT-001VMware AssessmentVT-002VMware DesignVT-003VMware ImplementationVT-004Proxmox DesignVT-005Proxmox ImplementationVT-006HA Cluster
Hardware and licences are not included in SOC/NOC/network services unless explicitly stated in the proposal.
09 / 12
Digital Transformation
Roadmaps and platforms that move legacy operations to secure, digital, measurable ones.
Digital Transformation7
DT-001Digital Transformation AssessmentDT-002Digital Maturity AssessmentDT-003Digital Transformation StrategyDT-004Enterprise ArchitectureDT-005IT Transformation RoadmapDT-006Government Digital TransformationDT-007Enterprise Digital Transformation
10 / 12
ITSM & IT Operations
IT service management and operations: service desk, processes and continuous improvement.
IT Service Management (ITSM)6
ITSM-001ITSM AssessmentITSM-002ITIL ImplementationITSM-003Service Desk ImplementationITSM-004CMDBITSM-005IT Asset ManagementITSM-006ServiceNow/Jira Implementation
11 / 12
Training & Cybersecurity Awareness
Cybersecurity awareness and technical training programmes with measurable outcomes.
Training & Awareness8
TR-001Cybersecurity AwarenessTR-002Network SecurityTR-003SOC AnalystTR-004Penetration TestingTR-005Incident ResponseTR-006Digital ForensicsTR-007Secure CodingTR-008CISO Workshop
Training programmes run for 10–20 participants in 3–5 day packages and can be tailored to sector and level.
12 / 12
vCISO & Managed Security Services
Managed cybersecurity packages, vCISO leadership and security retainers.
Managed Cybersecurity Packages4
MC-001Cyber EssentialMC-002Cyber BusinessMC-003Cyber EnterpriseMC-004Cyber Critical
vCISO & Security Retainer7
VC-001vCISO BasicVC-002vCISO ProfessionalVC-003vCISO EnterpriseSR-001Bronze RetainerSR-002Silver RetainerSR-003Gold RetainerSR-004Enterprise Retainer
Important notes
Every proposal follows a standard structure: scope, methodology, reference frameworks (NIST CSF 2.0, OWASP WSTG/PTES, ISO/IEC 27001, CIS Controls, CVSS), deliverables, timeline, SLA and, for services that include it, a retest with the period and number of rounds stated in the proposal.We sell defined deliverables, not consultant-days: executive and technical reports, remediation plans and retests.Trusted by leading technology partners
Our partners across critical sectors
FAQ
Questions our partners ask
Answers to the most common questions about our services, methodology and commitment to your business security.
How is SOC-as-a-Service different from traditional monitoring?
Traditional monitoring relies on basic logs and periodic checks. Our SOCaaS provides round-the-clock proactive defence: continuous threat hunting, real-time log correlation with advanced SIEM/SOAR tools, and immediate incident response led by certified analysts — so threats are neutralised before they cause damage.
How do you implement Zero Trust?
We eliminate implicit trust across your network with rigorous Identity and Access Management (IAM), multi-factor authentication, network micro-segmentation, and continuous verification of every user and device — wherever they connect from.
Can you help us meet industry compliance requirements?
Absolutely. Our consultants specialise in industry-specific compliance. We run gap analyses, implement the technical controls, and provide continuous auditing and reporting for local and international standards such as PCI-DSS (finance) and HIPAA (healthcare).
Which cloud platform should we choose?
We are platform-agnostic and certified across AWS, Azure and GCP. Our recommendation rests purely on an assessment of your infrastructure, operational needs, cost structure and compliance mandates.
What are the benefits of managed cloud services?
Optimised performance, significant cost control (FinOps) and 24/7 security monitoring beyond in-house capability — with resources that are always securely configured, efficient and automatically scaling to demand.
How do DevOps and automation accelerate our business?
By building robust CI/CD pipelines, automating routine tasks and integrating technologies such as IIoT and Big Data analytics — particularly for Oil & Gas and Banking.
Do you serve clients outside Libya?
Yes. While our headquarters is in Tripoli, Libya, we deliver remote and on-site managed services and consulting across the region, specialising in critical regional industries.
How do we get started?
It begins with a free consultation. We hold a discovery session on your IT challenges, security posture and business goals, then propose a customised service package for your needs and budget.
Let’s build a secure foundation for your digital future
It starts with a free consultation: we learn your challenges and goals, then propose a service package tailored to your needs and budget.