Nigeria-first
Self-Serve Workspace Provisioning: Instant 60s Launch • No Credit Card Required
Security and compliance evidence for Nigerian regulated teams.
Provision your organization, select your regulatory bundle (CBN, NDPR, PCI DSS), and launch automated security scans in under 60 seconds.
Self-Serve Architecture
Live in 60 seconds with zero sales friction.
0120 Seconds
Create Admin & Workspace
Register work credentials and your organization name. No credit card required. Hardware-isolated multi-tenant security architecture.
0220 Seconds
Select Regulatory Posture
Choose your default bundle: Nigerian Financial Baseline (CBN BSD + NDPR + PCI-DSS 4.0), Pan-African Directives, or Global Cloud SaaS.
03Instant Live
Launch & Automated Scans
Immediate access to your live dashboard. Run SAST/DAST scans, triage evidence, view compliance gap metrics, and export audit workpapers.
No noise
Plain obligations and owned gaps
Audit-ready
Reusable evidence and reports
Solutions
Default Nigerian bundles. Clean by design.
Tier-1 banks
Nigerian Tier-1 Banking
Keep banking controls, scan risk, owners and audit proof in one clean workspace.
CBNNDICBOFIANDPR/NDPA
View bundle
Payments fintech
Nigerian Payments / Fintech
Connect payment security work to compliance obligations without noisy framework dumps.
CBNNIBSS NPSNDPR/NDPANITDA
View bundle
Wealth fintech
Nigerian Wealth / Investment Fintech
Track privacy, KYC, secure delivery and investment-service controls as owned work.
NDPR/NDPANITDAAML/KYCISO 27001
View bundle
Microfinance banks
Nigerian Microfinance Banking
A lighter banking bundle for CBN, NDIC, privacy, cyber hygiene and audit follow-up.
CBN MFBNDICBOFIANDPR/NDPA
View bundle
Finance houses
Nigerian Finance Houses
Keep finance-house obligations focused on the risks, reports and proof that matter.
CBN Finance HouseBOFIANDPR/NDPANITDA
View bundle
Crypto / VASP
Nigerian Crypto Trading / VASP
Show licence readiness, Travel Rule work, wallet controls, asset reconciliation and platform findings in one evidence workspace.
SEC/ARIP VASP readinessAML/CFTKYC/CDDTravel Rule
View bundle
Nigeria first
Add regional bundles when expansion starts.
Ghana DPAKenya DPASouth Africa POPIASenegal PDPRwanda DPLRegional payments and AML add-ons
Product
Security operations that feed compliance evidence.
Application security
Live system testing
Dependency and container risk
Built for real teams
Compliance, security, and engineering working from the same evidence.
Use cases
Built for the teams carrying audit and security pressure.
Banks and regulated financial institutions
Prepare for CBN cybersecurity and operational resilience reviews
Fintechs, PSPs, MMOs, gateways, and switches
Manage payment, PCI DSS, NDPR, and NPS readiness in one workspace
Remittance, cross-border payments, treasury, and multi-currency teams
Prove cross-border transfer security, AML/CFT, FX, and settlement readiness
Product views
See the daily workflow before booking a call.
Command center
Scan operations
Compliance gaps
Who is Shomar built for?
Shomar is built for regulated African teams: banks, fintechs, PSPs, payment gateways, remittance operators, crypto/VASPs, agencies, government teams, and security-led organisations that need security operations tied to compliance evidence.
Does Shomar cover cross-border payments and remittance?
Yes. Shomar now includes a cross-border payments and remittance compliance baseline covering AML/CFT, KYC, sanctions and PEP screening, FX controls, payment corridors, settlement, reconciliation, partner due diligence, and evidence trails.
Does source code leave our environment?
Shomar supports SaaS scanning and can also support dedicated or customer-controlled worker patterns for sensitive teams. Repository scans are bound to approved projects and integrations so organisations keep clearer control over what is scanned.
Can we choose only compliance or only security scanning?
Yes. Platform admins can assign licence tiers, framework bundles, and feature flags so an organisation can receive compliance-only, security-only, or mixed access depending on the commercial scope.
How does the trial work?
Demo organisations can receive a 10-working-day or 14-calendar-day trial. After expiry, the organisation needs an active licence to continue using subscribed Shomar capabilities.
Can evidence stay in our own storage or local region?
Yes. Shomar supports managed evidence storage and customer-controlled evidence storage patterns, including external-link evidence, to help teams address confidentiality and data residency requirements.
Does Shomar replace auditors or compliance consultants?
No. Shomar helps teams organise evidence, map security posture to controls, track gaps, and export reports. It supports audit readiness, but it is not legal, regulatory, or audit attestation advice.
How do support and onboarding work?
Customers can raise support tickets in the app, request implementation help, and use demo or assessment forms for guided onboarding. Higher tiers can include priority support and dedicated success commitments.
Next step
Map Shomar to your licence, frameworks, and scan needs.
Questions or procurement requests? Email enquiry@shomar.io.