Locations · United Arab Emirates

Security testing for the UAE, from 90 minutes away.

We have no office in the UAE, and for most projects you will not need one. We test AI chatbots, apps and cloud for UAE companies from Bengaluru, share the same working week, and build in the UAE’s data laws from day one.

No UAE office: served from BengaluruSame Monday-to-Friday weekPDPL, DIFC and ADGM covered
In plain words

HanulSec serves companies in Dubai, Abu Dhabi and across the UAE from Bengaluru, India, which is 90 minutes ahead of the UAE. Since 2022 the UAE government week has run Monday to Friday, and most businesses followed, so we share the same working days. We red-team AI chatbots and agents, test web and mobile apps, APIs and cloud, and prepare companies for the UAE PDPL, the DIFC and ADGM data laws, ISO 27001 and ISO 42001. We have no UAE office; on-site visits can be arranged.

Checked against official sources on . General information, not legal advice.

Time difference
India is 1½ h ahead
Shared week
Monday to Friday
Office
None: served from Bengaluru
UAE rules
PDPL, DIFC, ADGM, ISR
Working together

Same week, 7½ shared hours.

India and the UAE both work Monday to Friday, and a 9-to-6 day in Dubai starts 90 minutes after ours. That leaves most of the day for calls, testing windows and read-outs.

India and the UAE both work Monday to Friday, so all five working days are shared. In India time, a 9-to-6 day in the UAE runs from 10:30 to 19:30, sharing seven and a half hours with a 9-to-6 day in Bengaluru. THE WORKING WEEKMONTUEWEDTHUFRISATSUNINDIAOFFOFFUAEOFFOFF5 DAYSSHARED EACH WEEKMonday to Friday, like IndiaINDIA TIME →06:0009:0012:0015:0018:0021:0000:0003:0006:00INDIAUTC+5:30 · OUR OFFICEOUR DAYUAEUTC+4 · 9 TO 6 LOCAL7½ H SHARED
The UAE government moved to a Monday-to-Friday week in January 2022, and most businesses followed. Some offices close early on Fridays.
An honest fit

What we take on, and what we don’t.

What we take on

Private companies and free-zone firms

  • AI red teaming of chatbots, voice agents and AI agents
  • Penetration testing of web and mobile apps, APIs and cloud
  • Readiness for the UAE PDPL and the DIFC and ADGM data laws
  • ISO 27001 and ISO 42001 readiness
  • Incident response, remote first, through our 24/7 line

What goes to others

Where UAE rules point elsewhere

  • Penetration testing and incident response for Dubai government, semi-government and critical-infrastructure entities, which must use Dubai Cyber Force certified companies
  • Issuing certificates or audit reports, which is for accredited bodies
  • Work that needs someone in the UAE every day
Questions

UAE questions, answered.

Q01Do you have an office in the UAE?
No. We serve UAE clients from Bengaluru, India, 90 minutes ahead of the UAE, and share the same Monday-to-Friday week. Most testing is remote. If your project needs someone on site, tell us when you ask for a quote and we will plan it in.
Q02Can you test AI chatbots used by UAE customers?
Yes. We test chatbots, voice agents and AI agents for prompt injection, data leaks and unsafe answers. Tell us which languages your users write in: attacks in a second language, or in a mix of two, are a common gap. See LLM red teaming.
Q03We are a Dubai government entity. Can you test our systems?
Not directly. Since 1 July 2024, Dubai government, semi-government and critical-infrastructure entities must buy penetration testing and incident response from companies certified under the Dubai Cyber Force programme of the Dubai Electronic Security Center, run with CREST. We are not certified under it. We can still help with readiness and policy work.
Q04Which UAE data law applies to us?
Most businesses fall under the federal PDPL. Firms in the DIFC or ADGM follow their own data protection laws, and health and banking data have their own rules. Our UAE guide maps it out.
Q05Will our data leave the UAE?
We plan the work so it does not need to: we test your systems where they are, use test accounts where possible, and keep personal data out of our reports.
Q06How do meetings and read-outs work?
On video, in your working hours. A 9-to-6 day in Dubai overlaps with ours for seven and a half hours, so kick-offs and read-outs are easy to fit in.
Sources

Checked against the official text.

Request a quote

Scope it in two minutes.

Tell us what you need protected. A security engineer, not a salesperson, replies with a fixed-price proposal.

  • Reply within one business day
  • Free 30-minute scoping call
  • Mutual NDA before any detail is shared
  • Fixed price, free retest of fixed findings