Focused security testing, delivered by the practitioner who does the work.
Qila is a cybersecurity consultancy focused on web application security, external attack surface assessment, and practical security guidance for startups and growing businesses. We work with a small number of clients at any time, a deliberate choice that ensures every engagement receives the attention and focus it requires, with direct access to the practitioner doing the work.
What we focus on
- Web application penetration testing
- External attack surface assessment
- Phishing simulations and security awareness training
- Authentication, access control, and secure development consulting
Who we work with
Our clients range from early-stage startups and software development teams to established organisations including financial institutions, healthcare providers, and professional services firms. What they have in common: they handle real user data, run public-facing systems, and want direct access to the practitioner doing the work, not an account manager relaying findings.
- Startups shipping or operating web products and APIs
- Businesses with public-facing applications, growing companies and established enterprises alike
- Software agencies seeking independent security reviews for client work
- SaaS companies preparing for client audits or enterprise security requirements
- Development teams that want practical secure-by-design guidance
Our approach
Manual testing over automated scanning. Direct access to the practitioner doing the work, not a project manager relaying information. Reports written for both developers and leadership. Honest scope: we don't inflate findings to make a report look larger, and we don't sell services we don't actually provide.
We are currently working toward industry certifications in offensive security and web application security to complement our practical experience.
Based in Bosnia & Herzegovina. Working remotely with clients around the world.
Understand your real risk
before someone else does.
A short conversation is all it takes to get a clear scope, timeline, and pricing, no commitment required.