About Samtaro Security

Who we are

Samtaro Security is a service of Samtaro Group, an international software, AI and digital-product group operated by Samtaro group Artificial Intelligence Solutions W.L.L., registered in Qatar (C.R. 252253). Samtaro Group builds and runs its own products, including the local discovery platform Where's Next.

Where the tooling comes from

Samtaro Group runs security engineering and privacy/compliance checks on its own products before release: dependency review, release checks, header and transport checks, and mapping of privacy requirements. Samtaro Security packages the passive, website-facing parts of that work for other businesses. We describe exactly what we check on our methodology page.

What we are not

• We are not a law firm and do not give legal advice.
• We are not a security consultancy; we do not perform security audits, penetration tests or any intrusive testing.
• We are not accredited, licensed or endorsed by NCSA, the QFC Data Protection Office, the Cyprus Commissioner or any other regulator, and not affiliated with OWASP.
• We don't issue certificates of compliance.

How we work

• Consent first: we only check domains you own or are authorised to test, verified before paid work.
• Passive only: public pages, public DNS, normal browser behaviour.
• Evidence-based: every finding shows the raw evidence and a source.
• Minimal data: free scan results aren't stored; paid reports are kept only as long as needed.
• Sourced content: our resources cite official texts and regulator guidance, with a visible "last reviewed" date.

Standards and sources we reference

OWASP Top 10:2025, Mozilla web security guidelines, RFC 7208 (SPF), RFC 6376 (DKIM), RFC 7489 (DMARC), RFC 9116 (security.txt), Qatar PDPPL (Law No. 13 of 2016) and NCSA's privacy guideline library, QFC Data Protection Regulations 2021, EU GDPR and Cyprus Law 125(I)/2018.