YE

YesWeHack

Dubai, United Arab Emirates

Penetration TestingOffensive SecurityApplication SecurityCloud Security
Founded 2015Serves Enterprise, SMB
Profile last updated: May 6, 2026

About

Founded in 2015, YesWeHack is a cybersecurity company based in Dubai, United Arab Emirates working in penetration testing, offensive security, application security +1 more.

YesWeHack is an Offensive Security and Exposure Management platform founded in 2015 by ethical hackers. It offers an API-integrated platform covering Bug Bounty programs, Vulnerability Disclosure Policies, Autonomous Pentesting and Continuous Pentesting. Its community of ethical hackers is used by organisations in over 50 countries to test internet-facing assets such as web applications, APIs, mobile apps, cloud infrastructure and desktop software. Services combine automated testing with human-led validation, and an in-house triage team verifies reports, removes duplicates and sets severity before findings reach customer teams. The company supports both private and public programs, and offers customer success management, live hacking events and compliance-oriented reporting. Its own infrastructure is ISO 27001 and ISO 27017 certified, CREST accredited and hosted in the EU on SecNumCloud-compliant infrastructure, with SOC 2 Type 2 alignment.

Location

Dubai, United Arab Emirates

Founded

2015

Focus areas

bug bountyvulnerability disclosureoffensive securityexposure managementpenetration testingCTEMcrowdsourced securityethical hackingtriage

Services & products

Security domains

Penetration TestingOffensive SecurityApplication SecurityCloud Security

How they deliver

SoftwareManaged ServicesProfessional Services

Products

Bug Bounty

Bug bounty platform

Crowdsourced security testing platform connecting organisations with vetted ethical hackers through public or private programs, with in-house triage.

Autonomous Pentest

Autonomous pentesting

Automated attack surface discovery and continuous assessment against actively exploited vulnerabilities, with human-validated checkpoints.

Continuous Pentesting

Continuous pentesting

Ongoing automated asset discovery, scanning and expert-led testing with real-time vulnerability reporting.

Vulnerability Management Platform

Vulnerability management

Unified platform for centralised vulnerability reporting, prioritisation, compliance reporting and integrations with customer workflows.

Customers

EnterpriseSMB

Industries served

Financial servicesEnergyTelecommunicationsSoftware

Compliance & partners

Compliance frameworks

DORANIS2ISO 27001SOC 2GDPRISO 29147ISO 30111

Credentials & affiliations

Certifications

ISO 27001

ISO 27017

CREST accreditation

SecNumCloud

SOC 2 Type 2

CVE Numbering Authority

Other cybersecurity companies in United Arab Emirates

View all