Omer Elhattab
Red Team : LeaderRed Team Leader
Red Team Operations
Loading
Please wait a moment...
Loading
Please wait a moment...
About Us
Kalkansec combines local expertise with global standards to build resilient digital defenses for public and private organizations.
About Us
Kalkansec combines local expertise with global standards to build resilient digital defenses for public and private organizations.
Since our founding, we have helped hundreds of organizations secure their data and protect their reputation from growing cyber threats.
Highest standards of confidentiality across every engagement and deliverable.
Clear, actionable reporting that helps leadership decide with confidence.
Continuous evolution of tools and methods against emerging threats.
Our Vision
A secure digital world for everyone
Our Team
A multidisciplinary team of certified cybersecurity professionals with deep experience across industries.
Red Team Leader
Red Team Operations
Leads delivery across Kalkansec engagements — scoping, scheduling, and client communication — and shares responsibility for the company's operational direction as co-founder.
Operations & Project Management
Certifications
We adhere to the highest global and regional standards to ensure the quality and credibility of our services.
International standard for information security management
Service organization controls for security and availability
Certified Information Systems Security Professionals
Our Partners
We collaborate with leading organizations to deliver comprehensive security outcomes.
Endpoint detection and response partner for advanced threat protection.
Cloud security and identity solutions integrated into enterprise defense programs.
Our Vendors
We are an authorised partner for each of these vendors. Every card says what the platform is for and exactly what we deliver with it.
Nothing published here yet.
Projects
Selected engagements showing how we strengthen defenses, achieve compliance, and respond to threats.
Nothing published here yet.
Our Services
A focused suite designed to protect your organization at every stage of the threat lifecycle.
Realistic attack simulations to uncover vulnerabilities before attackers do, with detailed reports and remediation plans.
EngageRound-the-clock monitoring, threat detection, and rapid response to security incidents.
EngageA dedicated team to handle breaches, malware, and restore operations quickly.
EngageRisk assessments, ISO 27001 and NCA ECC implementation, and security policy development.
EngageSecuring cloud infrastructure, IAM configurations, and auditing AWS, Azure, and Google Cloud setups.
EngageEmployee training programs to build security culture and reduce phishing attacks.
EngageBlog & Resources
Expert cybersecurity content to keep you informed on threats and best practices.
A practical guide to building a multi-layered defense strategy against ransomware.
Practical steps to implement essential cybersecurity controls in your organization.
Contact Us
Reach out for a free consultation and an initial assessment of your security needs.
Fast Response
We respond to all inquiries within 24 business hours.
Maslak, Sarıyer — İstanbul, Türkiye
+90 212 000 00 00Open in mapsÇankaya — Ankara, Türkiye
+90 312 000 00 00Open in mapsScoping usually takes two to three working days. Testing typically begins within one to two weeks of a signed scope.
Always. We sign a mutual NDA before any technical detail is exchanged.
Yes — the SOC is staffed around the clock, every day of the year, including public holidays.
Yes. Every programme is available in English, Turkish and Modern Standard Arabic.
Kalkansec
End-to-end cybersecurity for organizations that cannot afford uncertainty — from penetration testing to continuous defense.
OWASPOWASP
Testing Methodology
NISTNIST
Security Framework
24/7
Monitoring
MITRE ATT&CKMITRE ATT&CK
Detection Model
Our Core
Select a pillar to see the capabilities behind it. Every engagement we run draws on at least two of them.
We attack your systems the way a motivated adversary would, then hand you a fix plan ranked by real business impact.
Figures reflect the trailing twelve months across all active engagements.
“
“
“
Technologies we work with
Reach out for a free consultation and an initial assessment of your security needs.
Training
Instructor-led programmes delivered online or at your premises, plus the certifications our own engineers hold.
Scheduled sessions with a live instructor, hands-on labs and a recording for every module. Ideal for distributed teams.
Introductory course on recognizing phishing attacks and safe email practices.
Step-by-step guide for security teams responding to common incident types.
Developer-focused overview of the most critical web application risks.
Our instructors come to your office with a lab environment built around your own stack and threat model.
No programs published for this format yet.
The accreditations our engineers hold and the standards our training material is mapped to.
Certifications
We adhere to the highest global and regional standards to ensure the quality and credibility of our services.
International standard for information security management
Service organization controls for security and availability
Certified Information Systems Security Professionals
Browse every published programme with its syllabus, level and duration.
Our Courses
Downloadable courses and materials to strengthen your team's security awareness.
Introductory course on recognizing phishing attacks and safe email practices.
Security architect and creator of Owl OS, a Debian-based platform that unifies offensive, research, and defensive workflows. He supports Kalkansec with the Owl OS stack and custom toolchains, and plays a key role in the team's offensive research and adversary simulation work. More at khaledhaddad.it
Security Platform Engineering
Certified Ethical Hacking specialists
Compliance with National Cybersecurity Authority controls
Payment card industry data security standards
SIEM and security analytics platform for continuous monitoring and incident response.
Network visibility and DDoS protection platform. We deploy and operate NETSCOUT Arbor solutions for volumetric attack mitigation, packet-level traffic analysis, and service assurance across carrier and enterprise networks.
Stateless perimeter defense appliance that blocks inbound DDoS attacks and outbound indicator-of-compromise traffic before it reaches the firewall. We handle deployment, ATLAS Intelligence Feed tuning, protection group design, and bypass configuration.
IT operations and network monitoring suite. We implement Orion-based performance monitoring, log and configuration management, and alerting for infrastructure teams.
Privileged access management (PAM). We deploy Secret Server and privileged session management to control administrator credentials, enforce least privilege, and produce audit-ready access records.
Carrier-grade IP networking and security. We work with Nokia routing platforms and Deepfield analytics for large-scale traffic visibility and network-based DDoS detection.
Email security and people-centric threat protection. We configure Protection Server policy routes, URL and attachment defense, DMARC/DKIM/SPF alignment, and phishing simulation programs.
Edge security and content delivery. We implement WAF, bot management, Prolexic DDoS mitigation, and Zero Trust access at the edge to keep public services available under attack.
Vulnerability management and exposure analytics. We run Nessus and Tenable platform deployments for continuous asset discovery, risk-based prioritisation, and remediation tracking across IT and OT environments.
DDI and DNS security. We deploy integrated DNS, DHCP and IPAM with DNS-layer threat protection to keep name resolution resilient against data exfiltration and denial-of-service.
A dedicated team to handle breaches, malware, and restore operations quickly.
EngageRisk assessments, ISO 27001 and NCA ECC implementation, and security policy development.
EngageSecuring cloud infrastructure, IAM configurations, and auditing AWS, Azure, and Google Cloud setups.
EngageEmployee training programs to build security culture and reduce phishing attacks.
EngageRound-the-clock monitoring, threat detection, and rapid response to security incidents.
A dedicated team to handle breaches, malware, and restore operations quickly.
EngageCertified Ethical Hacking specialists
Compliance with National Cybersecurity Authority controls
Payment card industry data security standards
Step-by-step guide for security teams responding to common incident types.
Developer-focused overview of the most critical web application risks.