AFTA Licensed
Knowledge-Based Company

PAZH Security

Security from Development to Production

A journey to the heart of cybersecurity, where innovation and creativity merge with protection

AFTA-licensed team

Get your website or app tested and earn a pentest certificate

For online stores, startups and small businesses, based on AFTA requirements and OWASP. Once critical and high findings are fixed, you receive a certificate with a unique ID and QR code that customers and partners can verify online in seconds.

  • Connecting to payment gateways and banks
  • Working with organizations and tenders
  • Earning customer trust in your store or app
  • Finding vulnerabilities before attackers do
  1. 1Scope
  2. 2Pentest: 7–10 days
  3. 3Fix & retest
  4. 4Certificate: ~14 days later
SPECIMEN
PAZH
Sample

Penetration Test Certificate

Based on AFTA requirements & OWASP

System
Scope
Issued
ID
Verify online
Every certificate can be verified online by QR or ID
Knowledge-Based Products

PAZH Products

Locally built platforms for network and app security assessment, employee security awareness and business continuity — all deployable on-premise.

Tabavar

Business Continuity Management Platform

  • Business Impact Analysis
  • Continuity & Recovery Plans
  • Crisis Management & Exercises

CyberPhish

Security Awareness & Social Engineering Defense

  • Readiness Assessment
  • Targeted Training
  • Measure & Report

NETSEC

Network & Device Penetration Testing Platform

  • Discovery & Mapping
  • Vulnerability Assessment
  • Standard Reporting

MobSec

Mobile Application Security Testing Platform

  • Static Analysis
  • Dynamic Analysis
  • Traffic Analysis
Phase 01

Beginning

From Dream to Reality

Everything started in 2021. We didn't found this company just to run a business; from day one, our first and last word was one: Growth. Building on expertise, experience and creativity, we began a journey aimed at advancing cybersecurity at the national level.

Different Perspective

Learning and growing with every project

Expert Team

Combining experience with motivation

Pioneer

Committed to world-class standards

Innovative

Creativity at the heart of cybersecurity

Phase 02

Pentest & Red Team

Earning Trust, Simulating Real Attacks

Our first major step was obtaining the official AFTA license — a path forged through months of effort, adherence to international standards, and the development of proprietary checklists and methodologies. Today, with an expert team and 50+ in-house developed tools, we deliver penetration testing and Red Team operations based on the MITRE ATT&CK framework across networks, Active Directory, web and mobile applications.

2022

AFTA License

5+

Custom Tools

50+

Successful Projects

Phase 03

Software Development

Knowledge-Based Security Software Production Line

After years of activity in penetration testing, we expanded our path toward developing security software. As a knowledge-based company, our software production line — combining experienced developers with creative young talent — delivers innovative, locally-built products as part of an integrated security ecosystem.

Knowledge-Based Company

Officially certified by the Vice-Presidency for Science & Technology

Development Team

A blend of seasoned developers and creative young talent

Modern Technology

Adopting the latest tools and architectures

Locally-Built Products

Solutions tailored to Iranian organizations' needs

Phase 04

Tabavar

Business Continuity & Organizational Resilience Platform

Tabavar is our product for the day of crisis: a locally-built business continuity management system covering business impact analysis, RTO/RPO targets, continuity and disaster recovery plans, exercises and crisis management in line with ISO 22301 — so critical services keep running through cyberattacks, infrastructure outages or natural disasters.

ISO 22301

Reference Standard

BIA to DRP

Full Lifecycle

Local

On-Premise

Phase 05

Arman

Employee Security Assessment & Awareness Platform

Arman, an advanced phishing simulation and employee security training platform, is our second knowledge-based product, officially certified for its innovative status. Arman helps organizations identify vulnerable users, train them through smart adaptive content, and measure the growth of their security culture.

User Assessment

Identifying users vulnerable to phishing

Smart Training

Personalized training content for each user

Comprehensive Reporting

Tracking organizational security culture growth

Knowledge-Based Certified

An innovative product with official certification

Phase 06

Vision

The Path Ahead, Expanding the Security Ecosystem

Our journey has only just begun. Drawing on years of experience, an expert team, and our knowledge-based status, we are developing a new generation of security products and services — intelligent solutions that, in partnership with our clients and strategic partners, will elevate the country's cybersecurity ecosystem to a new level.

2021

Founded

10+

Strategic Clients

Endless

Path of Growth

For large enterprises & government

Your critical services keep running on the day of crisis

Tabavar is a locally-built business continuity platform for organizations whose downtime carries a public cost: from business impact analysis and RTO/RPO targets to recovery plans, exercises and crisis management — aligned with ISO 22301 and regulatory requirements.

Ministries & public agenciesBanks & financial institutionsCritical infrastructureInsurance & healthcareLarge enterprises & holdings

Fully on-premise

Sensitive continuity and crisis data stays inside your own infrastructure.

ISO 22301 aligned

Structured around the standard’s clauses and ready for audit.

Enterprise-scale crisis management

Coordinating multiple departments and sites with clear roles and escalation.

Executive readiness dashboard

A live view of critical-service readiness for boards and regulators.

Credentials & Qualifications

Our Licenses

Official certificates and licenses that guarantee the quality of our services

AFTA Security Assessment License
AFTA۱۴۰۱

AFTA Security Assessment License

AFTA Strategic Management Center

Computer Trade Union License
NSR۱۴۰۰

Computer Trade Union License

National Computer Trade Organization

Informatics Services License
INF۱۴۰۱

Informatics Services License

Iran IT Organization

Knowledge-Based Company Certification
Knowledge-Based۱۴۰۱

Knowledge-Based Company Certification

Vice-Presidency for Science & Technology

Technology Company at IUST
IUST۱۴۰۰

Technology Company at IUST

IUST Science & Technology Park

5 Official Valid Licenses

Reference Standards & Methodologies

Our assessments are performed according to these international frameworks

OWASP Top 10OWASP ASVSPTESMITRE ATT&CKISO/IEC 27001NIST SP 800-115

Partners

Trusted by Brands

Proud to collaborate with reputable organizations

Snapp

Snapp

Novin Payment

Novin Payment

Blu Bank

Blu Bank

Henkel

Henkel

Qom Municipality

Qom Municipality

Orkid Pharmed

Orkid Pharmed

Mofid Brokerage

Mofid Brokerage

Sanat Bank

Sanat Bank

Ministry of Culture

Ministry of Culture

Milli Gold

Milli Gold

Cinnagen

Cinnagen

Faraboom

Faraboom

Start Your Journey

Secure your digital future with advanced security solutions