NourySafe NourySafe

Secure your project with an elite team of security researchers

Instant automated scanning powered by an internal payload library and AI triage, alongside a human pentest lab bringing together the best Algerian researchers.

Trusted by technical teams in Algeria

nourysafe / scan-engine

$ nourysafe scan --target https://client.dz --type full

[✓] 30 payloads loaded from library

[✓] security headers ....... 27 checks

[!] XSS reflected — /search?q=<script> CVE-ready

[i] AI triage → severity: HIGH · CVSS 7.4

[✓] report generated in 0.9s

▌

XSS · CWE-79

CVSS 7.4 · High

8

registered researchers

1

partner companies

Our service

Everything you need to secure your systems, on one platform

Self-service

Smart online scanning

Enter your target URL and our internal detection engine runs over 116 attack patterns (SQLi, XSS, SSRF, IDOR...), then AI analyses the results and ranks them by CVSS with a simplified report.

  • In-house detection engine — Hand-written detection rules: payload reflection, timing differences, SQL errors, and checks on 27 security headers.

  • AI triage — Automatic severity classification and false-positive removal before delivery.

  • Instant HTML / PDF report — Detailed results in Arabic, French and English with remediation steps for every vulnerability.

  • Full legal compliance — Domain ownership attestation is mandatory before any scan, in line with law 09-04 on cybercrime.

Join us

Human penetration testing lab

Publish your own bug bounty program and let elite researchers test your systems manually within a defined scope. Every report passes expert review before it reaches you.

  1. Publish the program

    Define the scope, testing rules and reward range.

  2. Hunters start hunting

    Verified researchers test strictly within scope.

  3. Expert review

    Every report is qualified and its severity confirmed before delivery.

  4. Report & reward

    You receive the validated report and pay the researcher via CCP or BaridiMob.

Ethical testing first

No scan is permitted without explicit domain ownership attestation or documented authorization. Any activity outside the defined scope results in a permanent ban.