Contact us

Engineering & Cybersecurity

Engineering you can trust. Security you can prove.

We build the websites, software and infrastructure your business runs on, then test them the way an attacker would. One team, from the first conversation to long after launch.

  • DeliveryOne team, end to end
  • AssuranceIndependent security testing
  • ResponseAn engineer within one working day

Selected clients

    Services

    Five practices. One accountable team.

    Every engagement is delivered end to end by the engineers who design it, from architecture through to long-term support.

    Discuss a project

    Find and fix vulnerabilities before attackers do.

    Independent penetration testing of your applications, networks and infrastructure, with clear, prioritised remediation guidance. We also review source code, harden configurations and support your team through incident response.

    • Penetration testing
    • Secure code review
    • Configuration hardening
    • Incident response

    Fast, accessible websites that you fully own.

    Corporate websites and web platforms designed and engineered in-house to high standards of performance and accessibility, with native right-to-left support for Arabic and Kurdish. We host, maintain and support everything we deliver.

    • Design and development
    • Performance and accessibility
    • Arabic and Kurdish (RTL)
    • Hosting and maintenance

    Custom software designed around how you operate.

    Web applications, Android apps and desktop software built to fit your workflows, not the other way round. Where connectivity is unreliable, we build offline-first systems that keep working.

    • Web applications
    • Android applications
    • Desktop software
    • Offline-first systems

    Reliable by design and recoverable by default.

    Linux server administration, automated deployment and managed hosting, with monitored services, verified backups and scheduled restore tests. Email and DNS configured correctly and kept that way.

    • Linux administration
    • Deployment automation
    • Backup and recovery
    • Monitoring, email and DNS

    Day-to-day technology, professionally managed.

    Network installation and management, device support, data recovery and the automation of repetitive work, so your people can focus on the business rather than the equipment.

    • Network design and support
    • Device management
    • Data recovery
    • Process automation

    Approach

    A delivery process built for accountability.

    Six defined stages with clear deliverables, so you always know where your project stands.

    Stage 01 of 06

    Consultation

    An engineer responds within one working day to understand your objectives and constraints. No sales scripts and no ticket queues.

    Stage 02 of 06

    Discovery and scope

    We assess your environment and agree a written scope, timeline and deliverables before any work begins.

    Stage 03 of 06

    Engineering

    Delivery in regular, working increments, so progress is visible and your feedback shapes the result.

    Stage 04 of 06

    Security assurance

    Every system is tested before release: security review, backup verification, monitoring and a documented restore test.

    Stage 05 of 06

    Launch and handover

    A controlled go-live with domains and certificates in place, and documentation your team can rely on.

    Stage 06 of 06

    Ongoing support

    We remain accountable after launch, maintaining and supporting everything we deliver.

    Credentials

    Accountable to recognised standards.

    The organisations we work with, the certifications our team holds and the frameworks our work is measured against.

    Selected clients

      Standards and frameworks

        Certifications

          Case studies

            About

            An engineering firm built on accountability.

            First Light is a technology and cybersecurity firm based in Erbil, Iraq, founded by Ali Salih. We bring together the disciplines most organisations source from separate suppliers: web platforms, custom software, infrastructure and independent security testing.

            Years of building and testing real systems have shaped one principle: the team that understands how systems fail is the team that should build them. Clients work directly with the engineers responsible for their systems, with no account managers and no hand-offs between vendors.

            • Founded byAli Salih
            • HeadquartersErbil, Iraq
            • Response timeWithin one working day

            Contact

            Tell us what you are building.

            Send a few lines. An engineer replies within one working day.

            Area of interest