A security research and engineering lab, based in London

Cybersecurity Engineering, Research & Development

QuditLabs designs, builds and investigates practical solutions to complex security problems — securing systems from the ground up, or strengthening what already exists. Our work spans secure architecture, cloud and application security, malware analysis, detection engineering, AI-assisted security and applied research.

Looking for a cybersecurity engineering company UK teams can work with directly? QuditLabs is based in London and starts every project by understanding your system, then designs and builds the controls it needs. Secure architecture comes first, so security is built in rather than added at the end.

Our cybersecurity engineering work covers cloud and application security, detection engineering and security automation, with secure architecture reviews for new and existing systems. The engineering is informed by our own research, which is also where our tools come from. Choose QuditLabs for cybersecurity engineering that is led by research.

Cybersecurity engineering illustration: shield with security dashboards and analytics

Three core areas of work

What we do

Security engineering

QuditLabs designs, builds and investigates practical solutions to complex security problems — securing systems from the ground up, or strengthening what already exists. Our work spans secure architecture, cloud and application security, malware analysis, detection engineering, AI-assisted security and applied research.

Security research

We investigate the threats, techniques and systems shaping modern cybersecurity, combining experimentation, software engineering and machine learning. This spans malware analysis and reverse engineering, AI and ML applied to security problems, network and detection research, IoT and IIoT security, and the emerging intersection of AI security and agentic systems. Our research is applied.

R&D and labs

We turn research into working tools rather than leaving it as theory. Our Prism family of static analysis tools and PrismCDR are built from this philosophy, alongside Threat Lab, a controlled environment for adversarial experimentation. If research raises a practical security problem, R&D is where we try to solve it.

Built in the lab

Tools and environments

Research that produced something usable. Each of these started as a question we could not answer with what already existed.

PrismEX

Advanced static analysis for Windows executables. In-depth inspection and threat extraction.

PrismAPK

Static analysis for Android applications and Linux binaries. Comprehensive risk assessment.

PrismCDR

Content disarm and reconstruction. Stripping active threats from files while preserving what the user needs.

Threat Lab

A controlled environment for malware analysis, traffic replay, threat hunting and adversarial experimentation.

Lab capabilities

What the lab works across

Malware analysis and reverse engineering

Advanced static analysis for Windows executables. In-depth inspection and threat extraction.

AI and ML for cybersecurity

Machine learning for threat detection, anomaly analysis and automation.

Network and detection engineering

Building detection pipelines, sensors and telemetry analytics.

IoT and IIoT security

Securing connected devices, protocols and industrial systems.

Cloud and platform security

Research on cloud threats, misconfigurations and secure architectures.

AI security and agentic systems

Trust boundaries, permission models and tool-use risk in agentic AI.

Our approach

Research-led. Engineering-driven. Security-focused.

QuditLabs combines academic research, practical security engineering and software development to investigate emerging threats and build solutions that can be applied in real-world environments.

QM

Qublai Khan Ali Mirza, PhD

Founder · Cybersecurity engineer and researcher

Work spanning security engineering, malware analysis, detection engineering and applied AI, combining industry experience with a PhD in network security and machine learning.

Frequently asked questions

Before you get in touch

What does QuditLabs do?

QuditLabs is a cybersecurity engineering, research and development company. We design and build secure systems (security engineering), investigate emerging threats and techniques (security research), and build practical security tools like the Prism family of static analysis platforms (R&D).

Is QuditLabs a cybersecurity consultancy?

Not in the traditional sense. QuditLabs isn’t structured around selling penetration tests or compliance audits. We’re research-led: our engineering work is informed by applied research, and our research is aimed at producing practical, usable security capabilities rather than reports alone.

Does QuditLabs work with companies that don't have an existing security team?

Yes. We work with organisations at every stage, from teams establishing security foundations for the first time while still building their systems, to organisations with mature security programs that need specialist depth in a specific area like cloud security, detection engineering, or AI security.

What is MCP security, and does QuditLabs work in this area?

MCP (Model Context Protocol) security concerns the trust boundaries, permission models, and risks involved in AI systems that use tools and external data sources. QuditLabs researches and engineers security controls for agentic AI systems, including MCP integrations, as part of our AI Security & Agentic Systems work.

What tools has QuditLabs built?

QuditLabs builds and maintains the Prism family of security analysis tools: PrismEX for static analysis of Windows executables (PE files), PrismAPK for Android and Linux binary analysis (APK/ELF), and PrismCDR, an R&D project on content disarm and reconstruction. We also operate Threat Lab, a controlled environment for security research and adversarial experimentation.

Who founded QuditLabs?

QuditLabs was founded by Qublai Khan Ali Mirza, PhD, a cybersecurity engineer and researcher whose work spans malware detection, cloud security, and applied AI/ML for cybersecurity, combining industry experience with a PhD in network security and machine learning.

Does QuditLabs offer penetration testing or compliance audits (ISO 27001, SOC 2, etc.)?

QuditLabs’ focus is security engineering and research: secure architecture, application and cloud security, detection engineering, and security automation, rather than compliance-driven audit services. For specific engagement scope, get in touch and we’ll advise directly.

How can I collaborate with QuditLabs on research?

We welcome academic research collaboration, publication partnerships, and joint experimental work. Reach out via the Contact page and select “Research collaboration.”

Have a security problem worth solving?

Tell us about your security engineering problem, research idea or potential collaboration. A short description is enough to start.