Security
Middleware is not authorization
Four NestJS advisories in seven months, all one bug: the matcher and the handler disagreed about the request. The check belongs where the data is read.
Qasioun Cloud is a technical services firm working across Syria and the wider region. We advise, build, run and secure web systems — hosting is one of those services, not the whole of it.
We started from a practical problem: reaching world-class technical work and dependable infrastructure, paid for locally and supported in Arabic, with no international card and no long commitment.
Prices are in US dollars. Payment is the equivalent in Syrian pounds, at the rate on the day of payment.
$48per year
$6per month
Most popular
$96per year
$11per month
$180per year
$20per month
Every plan includes: dedicated resources · cPanel · SSL · free migration · support in Arabic
Coming soon
For projects that have outgrown shared hosting: a whole server with resources shared with nobody, root access, long-running processes, and the databases and services you choose.
We provision, secure and monitor the server, and handle updates and backups — you build.
root
Full control of the machine
Dedicated resources
CPU and memory shared with nobody
Operating system
Your distribution and versions
Monitoring
24/7 with alerts
We build, run and secure systems — from consulting through deployment and maintenance.
Architecture review, technology selection, and migration and scaling plans.
Drupal · Laravel · Node.js · NestJS · Next.js — systems built to last, not just to ship.
Docker · CI/CD · deployment automation · infrastructure as code.
Security review, server hardening, and breach and malware remediation.
Hosting with dedicated resources, and monthly maintenance contracts with updates and monitoring.
Choose a plan and message us on WhatsApp
We send you the amount in Syrian pounds at today's rate
Transfer via Sham Cash and send the transaction reference
We activate your account within an hour during working hours
Monthly or yearly payment. No long commitment, no cancellation fee.
What we learn from running systems, written for the people who build them.
Security
Four NestJS advisories in seven months, all one bug: the matcher and the handler disagreed about the request. The check belongs where the data is read.
SEO
Next.js merges metadata key by key, so a route that omits alternates inherits its layout canonical. Ours pointed every page at the homepage.
Security
One RCE at CVSS 10.0, then six denial-of-service patches in eight months. When the contract is "accept whatever the format encodes", fixing one lever leaves the rest.