Software services

Custom software built around how you work

From public platforms to the internal systems your staff use every day — designed, built, secured and supported by one accountable team in Muscat.

Combined experience
70+
years across the ThiqahTech team
Custom web platform development in Oman
Documented REST API and system integration
iOS and Android mobile app development
Secure software platforms for government in Oman
ThiqahTech client platform illustration
ThiqahTech client platform illustration
ThiqahTech client platform illustration
years of combined delivery experience
0 +
clients served across Oman, KSA and Pakistan
0 +
week sprints, with a working demo at the close of each
0
month warranty from go-live, with support under agreed SLAs
0
What we build

Software for the way your organisation runs

Public platforms, internal systems and the integrations that connect them — built in Arabic and English and designed to grow.

Web platforms

Portals and member services

Public websites and self-service portals with bilingual content, right-to-left layouts and a CMS your own staff can manage.

AR / EN
CMS
WCAG 2.1 AA

Internal systems

Business systems and approvals

Workflow and approval systems with role-based access and a full audit trail for the teams who use them every day.

Workflows
RBAC
Audit trail

Integrations

Connected to what you already use

Payment gateways, SMS and OTP, the WhatsApp Business API, ID card OCR and your existing systems.

Thawani
SMS / OTP
WhatsApp API

Upgrades

Modernise and support existing software

We review the code and database first, then add features, fix performance problems or take over support.

Code review
Performance
Support

Dashboards

Reporting built on your own data

Dashboards, statistics and reports that give management a clear view of operations.

Dashboards
Reports
Analytics

Field apps

Mobile and on-site applications

Responsive web and field applications for referees, organisers and on-site teams, ready to extend to iOS and Android.

Responsive
Field app
iOS / Android
Proven delivery

Systems we already run for clients in Oman

Three references that show how our software performs under real conditions.

Isometric podium with a target and a live results board
Oman Traditional Shooting Federation

Competition registration and management

Tournament and competition setup, online registration, participant records, attendance, scoring and results — the event, competition, date, group and target model running under live competition conditions.

  • Online registration and participant records
  • Attendance, live scoring and results
  • Real-time target board and soft-hold booking
Isometric government building with a security shield
Projects, Tenders and Local Content Authority

Adaa and Amanah platforms

National-scale government platforms delivered under public-sector governance, security review and audit expectations — where our cybersecurity submission experience comes from.

  • National-scale government platforms
  • Public-sector governance and audit
  • Omani security review experience
Isometric membership card with a phone and online payment
Oman Society of Engineers

Membership platform and website

Member registration and verification, digital profiles and cards, renewals, online payment and a content-managed public website maintained by the client’s own staff.

  • Registration, verification and digital cards
  • Renewals and online payment
  • Website managed by the client’s team
How we build

Built once, extended many times

A modular, microservices-ready architecture with documented APIs and a real-time layer, so later phases extend the platform instead of rebuilding it.

Channels

Every way users reach you

Public website in Arabic and English, user portals and booking, field apps for staff, and live results displays.

AR / EN
Portals
Field app

API & real time

Documented and live

REST and GraphQL APIs documented with OpenAPI 3.0, WebSockets and SSE live channels, background jobs and an API gateway.

OpenAPI 3.0
WebSockets
Rate limiting

Core services

Modular business services

Identity and membership with OCR and OTP, booking, scoring engines, payments, notifications and role-based access.

Identity
Payments
RBAC

Data

Reliable, auditable data

PostgreSQL relational core, Redis caching, object storage with signed URLs, a full audit trail and backups.

PostgreSQL
Redis
Signed URLs

Platform

Secure in-country hosting

In-country cloud across availability zones, WAF, DDoS protection and CDN, central logging and a health dashboard.

Multi-AZ
WAF + CDN
Monitoring
Security and quality

Security and testing from the first sprint

Security is a week-one workstream, not a final-week event — and every release is tested before it reaches your users.

Data protection

In-country and PDPL-aligned

All data held inside the Sultanate, designed for the Personal Data Protection Law with restricted views and private file stores.

Data residency
PDPL

Encryption

Protected in transit and at rest

TLS 1.3 or later in transit and AES-256 at rest, with every sensitive operation recorded in the audit trail.

TLS 1.3
AES-256

Testing

Tested before it ships

Security testing and code review, load testing for 500+ concurrent users, and at least 70% unit test coverage.

Load tested
70% coverage

Resilience

Backups proven, not assumed

Daily incremental and weekly full backups with tested restores, penetration testing and ISO 27001-aligned practices.

Backups
Pen testing
How a project runs

Five steps from idea to live system

Two-week sprints, a certified project manager, weekly progress reports and a maintained risk register.

01

Understand

Discovery, requirements and scope agreed in writing, with an approved design and requirements document.

02

Design

UX/UI and architecture planned and reviewed with you before building starts.

03

Build and test

Short sprints with a demo at each close, plus security, load, integration and user acceptance testing.

04

Launch and train

Security approval, go-live and administrator training, with source code and documentation handed over.

05

Support

Warranty, fixes, security updates and improvements under agreed SLAs — and the next phase when you are ready.

Your delivery team

One accountable team under a certified project manager

Every project is staffed with the roles it needs, with a single point of accountability from kick-off to handover.

Leadership

Project Manager and Business Analyst

PMP-certified project management with requirements traceability and written acceptance criteria.

PMP
Traceability

Design

Solution Architect and UI/UX Designer

Architecture and APIs built for later phases, with Omani identity, RTL/LTR and accessible screens.

Architecture
UX/UI

Engineering

Full-stack and mobile engineers

Senior engineers building core services, integrations, responsive web and field applications.

Full-stack
Mobile

Quality and ops

QA and DevOps / Security engineers

Test plans and automation, UAT facilitation, hosting, hardening and cybersecurity submission.

QA
DevOps
Specialised resources

Extra capability when you need it

Add specialist capacity to your own team for as long as the work needs it.

Enterprise

Outsourced team capacity

An outsourcing model that adds to your own team, with backup cover so work continues when people are away.

Outsourcing
Backup cover

Digital

New digital channels

Mobile development, robotic process automation and chatbots to open new channels and remove manual work.

Mobile
RPA
Chatbots

Cloud and infrastructure

Sized for your workload

Cloud infrastructure built on open-source software and virtual machines, sized for your workload.

Open source
VMs

Big data and analytics

Better data processes

Better data processes with Power BI, Power Apps and business analytics.

Power BI
Power Apps
Questions about the service

Answers before you ask

Still have a question? Send it to us and we will get back to you within one working day.

Yes. A lot of our work is improving systems that are already in place — adding features, fixing performance problems, modernising an ageing interface, or taking over support from a previous developer. We start with a review of the existing code and database so you know what’s worth keeping before anything is rebuilt.

It depends on scope, but most organisations see a working first version within 8–12 weeks. We build in stages so you can use and test early functionality rather than waiting until the end. Larger platforms run longer and are broken into phases with agreed milestones.

You do. The source code, database and documentation are yours, and we can hand them over or host and maintain them for you — whichever suits your team. Ongoing support is a separate agreement, not a condition of ownership.

Security is a first-sprint workstream. We design for in-country hosting and the Personal Data Protection Law, encrypt data in transit and at rest, keep a full audit trail, and have taken government platforms through Omani security review.

Administrator training, the complete source code, API documentation and an administrator guide — followed by a warranty period with fixes, technical support and security updates under agreed SLAs.

    Ask a Question

    Tell us what you need and we'll get back to you within one working day.

    Start a project

    Have a system in mind?

    Tell us what you need to run. We will walk you through a platform we already deliver that is close to it, then agree the scope with you in writing.

    Isometric bar chart with a flag and an add card