Technology · Security · Engineering
We build systems that hold.We find the ones that don't.
We work with public institutions, banks and international organisations, from software to the field.
ScrollWhat we do
01 / Services
Digital
Reverse engineering, binary exploitation, web and API testing, and code review from both sides, black box and white box. We go after the hard targets: banking and payment apps, core banking systems, government platforms, complex logistics software. The report shows what is exploitable, how, and how to close it. We re-test after you patch, at no extra cost.
We build AI on your own data and your own infrastructure, so nothing sensitive leaves your control. That runs from assistants that answer from your documents in Arabic and French, to models that catch fraud and score risk, forecasting, and computer vision for drones and cameras. Because we are also a security firm, we build these systems to be attacked and hold, and we test the AI others have already deployed. One of our legal search engines finds the right document about 96% of the time, with answers that stay true to the source.
Complex platforms, built to last and to take real load. We don't build and walk away: more than seven are in production under our care right now.
We design embedded systems: drones, connected sensors, custom electronics. Our engineers come from electronics and hardware, so we work at the board level, not just the software on top. We've put this to work in agriculture, security and logistics, from the device in the field to the dashboard that reads it.
Field & Services
Calonur is also a works company, it is written into our name. What makes us different from a regular contractor is how we track a site: drone surveys, sensors installed on the ground, and progress records the client can check for themselves. We do the studies before touching the terrain, and we also assist project owners who want an independent opinion on a project already under way.
We take a study from start to finish: the questionnaires, enumerators in the field collecting on mobile instead of paper, data cleaning and analysis, then the report and its presentation. Because our own engineers build the collection tools, every figure in the report can be traced back to the questionnaire it came from.
We purchase, import and distribute on behalf of our clients, and represent suppliers in Mauritania. Where we are most useful is technical equipment: IT hardware, electronics, sensors. Our engineers check what is being ordered before it is paid for, not after it is delivered.
How we work
02 / Approach
We take on work that has to be done right, not fast. If we can't do it properly, we don't take it.
A first call to pin down what we do, on what scope, and under what constraints. Free, and no commitment.
Signed before we start, whenever the subject calls for it. It covers your data, our findings, and the fact that the engagement exists at all.
Penetration test, survey or work site: the work runs. Anything critical reaches you straight away, not weeks later in a report.
Everything is written down: findings and fixes for a test, figures and sources for a study, measurements and progress for a site. A short read for leadership, the full detail for your teams.
Your team fixes or decides what happens next. We stay on hand to unblock whatever gets stuck.
We go back over our own work: re-testing fixed findings, revisiting the site, checking the figures. Part of the engagement, never billed on top.
We work with companies, banks, universities and government bodies. We don't say who.
Track record
03 / Work
We do not publish client names or the details of an engagement. Here instead is the kind of work we take on and what came out of it. The digital side carries most of what we can show today; the field side gets documented the same way, one engagement at a time.
Recurring assessments of web apps, APIs and internal infrastructure for banking, payment and public-sector systems. We surface the critical ways in, show what they would cost, and see the fixes through to closed. Clients and findings stay under NDA.
A legal search engine in Arabic and French that reads scanned documents and returns the passage that answers the question. On our own benchmark it lands the right document about 96% of the time, and every answer traces back to the text it came from.
A research management portal in three languages, wired into seven academic databases that sync every night, with a tamper-proof document archive. Delivered in three months.
More than seven systems we built and still operate. Monitoring, updates and uptime stay with us after go-live, not handed back to the client on launch day.
Who we work with
04 / Clients
Public institutions, universities, banks and companies, in Mauritania and beyond.
Ministère du Pétrole, des Mines et de l'Énergie
Ministère de la Santé
Université de NouakchottThe team
05 / About
Calonur is a technology and engineering company, based in Nouakchott and registered in Mauritania as Calonur (Services et Travaux) SUARL. Our backgrounds are different, offensive security, AI, hardware, civil engineering, but we share one standard: build things that still stand years later, from software to the work site.
Where our expertise lies:
Sectors we serve:
Before you write
06 / Questions
By written quote, after a first call that costs nothing. The price follows the scope, not a posted rate card: no two penetration tests or work sites are alike. Once signed, the quote does not move.
Yes, before any technical discussion. It is how we normally work, not a favour. If the subject is sensitive, write to us without the details and we will put the agreement in place first.
A typical penetration test runs one to three weeks depending on scope. A field study, a few weeks to a few months depending on the sample. A national platform, we delivered one in three months. The calendar is set at scoping and written into the quote.
Yes. Surveys, work sites and sensor installations happen where they need to happen, anywhere in Mauritania. The digital work happens from anywhere.
Arabic, French and English, for the conversations and for the deliverables. Our document search systems read Arabic and French.
You do. Reports, data, source code: everything produced in the engagement is handed over in full ownership on final payment, with no licence and no dependency on us.
Get in touch
07 / Contact
Reach us directly. No sales desk, no queue.
Tell us in a few lines what you need, the systems or the site involved, and your timeline. We reply within 48 working hours. If it is sensitive, write without the technical detail, and we will put an NDA in place before going any further.
NDA signed before any technical discussion. Your data stays yours.
