NOC & SOC live 24/7 Support portal
End-to-end IT solutions & services

From the rack to the cloud, IT that never blinks.

OKTAGATE designs, deploys and operates the infrastructure, security and software that keep Iraq’s most demanding organisations running. One accountable partner for hardware, software and everything in between.

12+Years in the market
480+Projects delivered
99.98%Contracted uptime
24/7NOC & SOC coverage
Operations centre Illustrative
Core data center42 racks · 99.98% uptime Healthy
SD-WAN fabric46 branches · dual carrier 46/46 up
Security operationsSIEM · 1.2 B events / day 3 in triage
Backup & DRImmutable · last restore test 6 d ago 98% patched
Throughput11,420 sessions · 6.4 Gbps

A representative view of a managed environment. Figures are indicative, not a live feed from a client.

What we do

One partner for the entire IT stack

Most organisations juggle a dozen suppliers and still own every gap between them. OKTAGATE takes the whole chain, from design and supply through installation, integration, security and ongoing operations, under a single contract and a single SLA.

Data center & IT infrastructure

Complete facilities from a single 6U comms room to a Tier III-ready hall: raised floor, containment, precision cooling, redundant UPS, NOVEC-1230 suppression, EMS monitoring and structured cabling, all engineered, installed and certified by our own teams.

42UStandard rack builds
Dual-pathPower & cooling
Cat6A / OS2Certified cabling
Explore infrastructure services

Networking & connectivity

Campus LAN, high-density Wi-Fi, data center fabric, SD-WAN and carrier-grade routing, designed for uptime rather than for the datasheet.

  • Cisco, Aruba, Fortinet, MikroTik, Huawei
  • Multi-site SD-WAN & VSAT backup
Learn more

Cybersecurity & managed SOC

Assess, harden, monitor, respond. Next-gen firewalls, EDR/XDR, email and identity protection backed by a 24/7 security operations centre.

  • SIEM, SOAR and threat hunting
  • Incident response & ransomware recovery
Learn more

Cloud Computing

Tenant design, migration and day-two operations across Microsoft 365, Azure and AWS, with governance, licensing and cost control included.

Learn more

Software development

Full-stack web and mobile applications, ERP implementations and bespoke business tools, built in-house by our own developers and handed over with the source code.

See what we build

Managed IT & outsourcing

Service desk, on-site engineers, annual maintenance contracts and fully outsourced IT departments, priced per user, per device or per site.

Learn more

Unified communications & AV

IP-PBX and VoIP telephony, contact centres, Teams Rooms, interactive flat panels, digital signage and boardroom AV, deployed, integrated and supported end to end.

Learn more

Physical security & smart building

IP CCTV with video analytics, access control, time & attendance, ANPR, intrusion detection, gate barriers and IPTV on one platform across every site you operate.

Learn more
Software development

We do not only run your systems. We build them.

A full in-house development team sitting alongside the infrastructure and security practices. Web platforms, mobile apps, ERP rollouts and the one-off internal tool nobody sells off the shelf, all built to the same engineering standard as everything else we deliver.

Web applications & portals

Customer portals, staff intranets, booking and payment platforms, e-commerce storefronts and management dashboards. Responsive by default, and bilingual with right-to-left Arabic and Kurdish support built in rather than bolted on.

  • React, Next.js, Vue, Laravel, .NET, Node.js
  • Payment gateway and SMS/OTP integration

Mobile apps for iOS & Android

Native and cross-platform apps for customers, field teams and delivery fleets. Offline-first where connectivity is unreliable, with push notifications, maps, barcode scanning and device hardware where the job needs it.

  • Flutter, React Native, Swift, Kotlin
  • App Store and Play Store publishing handled

ERP systems

Odoo and Microsoft Dynamics implementations covering finance, inventory, procurement, manufacturing, HR and payroll. Configured around your actual process, with data migration, user training and post go-live hypercare included.

  • Custom modules where the standard one does not fit
  • Multi-company and multi-currency setups

Bespoke business tools

The systems no vendor sells for your exact problem: HRMS and attendance, CRM and sales force tracking, POS, fleet and logistics, warehouse management, LMS, ticketing, document approval and workflow automation.

  • Built from a written requirements spec you sign off
  • Role-based access and full audit trails

Integrations & APIs

The plumbing that stops your staff typing the same figure into three systems. We connect ERP, POS, banking, telephony, attendance devices, e-commerce and government portals, and we document every endpoint we build.

  • REST and SOAP APIs, webhooks, scheduled sync jobs
  • Legacy database and flat-file migrations

Hosting, DevOps & app support

Because we run infrastructure too, what we build does not get thrown over a wall. Deployment pipelines, hosting on your servers or in the cloud, monitoring, backups, security patching and an SLA on the application itself.

  • CI/CD, containers, staging and production environments
  • Ongoing enhancement retainers

How a build actually runs

Fixed scope, fixed price, fortnightly demos. You see working software every two weeks rather than a status report, and you own the repository from the first commit.

  • Requirements before code

    Workshops, process mapping and a signed functional spec with screens, roles and rules. Changes after sign-off are quoted, not absorbed silently and then argued about later.

  • You own the source

    Your repository, your accounts, your licences. Full source code, database schema and deployment documentation are handed over at go-live, so you are never locked to us.

  • Secure by construction

    Our security team reviews what our developers write. Authentication, authorisation, input validation and dependency scanning are part of the build, not a penetration test surprise afterwards.

Delivery model Typical build
Discovery & specWorkshops, process map, sign-off2–3 wks
UX & prototypeClickable screens before build2 wks
Build sprintsWorking demo every two weeks6–16 wks
UAT & trainingYour users test against the spec2 wks
Go-live & handoverSource, schema, docs, hypercareIncluded
Projects delivered
Certified engineers
Active support contracts
Endpoints under management
Why OKTAGATE

Engineering discipline, not box shifting

Anyone can quote a switch. Very few can hand you a documented, tested, supportable environment and stand behind it three years later. That difference is our entire business model.

  • Vendor-certified engineers, in-house

    CCIE, CCNP, NSE, PCNSE, MCSE, VCP and CISSP-level people on staff, not subcontracted for the duration of a project.

  • Everything documented and handed over

    As-built diagrams, IP schemas, rack elevations, configuration backups and runbooks are part of the deliverable, not an extra line item.

  • SLAs that are actually measured

    Response and restoration targets per severity, reported monthly from the ticketing system, with service credits when we miss.

  • Local stock, local hands

    Spares held in Erbil and Baghdad, engineers who can be on site in Basra, Sulaymaniyah, Duhok, Kirkuk or Mosul the same week.

ISO

27001-aligned delivery

Change control, access management and evidence trails on every engagement.

24/7

NOC & SOC

Around-the-clock monitoring with named escalation paths, not a voicemail box.

1 yr

Workmanship warranty

Twelve months on installation and configuration, on top of vendor warranty.

EN/AR/KU

Trilingual teams

Documentation and support in English, Arabic and Kurdish (Sorani).

Solution blueprints

Proven architectures, ready to adapt

Reference designs we have built repeatedly, sized, costed and documented, so your project starts from something that already works.

Hyper-converged private cloud

Three-node HCI cluster with all-flash storage, 25 GbE spine-leaf fabric, hypervisor licensing and a hardened management VLAN. Scales a node at a time.

  • VMware vSAN, Nutanix or Proxmox
  • Live migration & rolling patching

3-2-1-1-0 backup & DR

Veeam or Commvault with an immutable on-prem repository, off-site copy, air-gapped tier and scheduled restore verification. RPO from 15 minutes.

  • Ransomware-resilient by design
  • Quarterly DR drills with report

Facility & environment

Modular UPS with redundant capacity, in-row precision cooling, hot/cold aisle containment, NOVEC-1230 suppression and full environmental monitoring.

  • Temperature, humidity, leak & smoke
  • SNMP alerting into the NOC

Zero-trust perimeter

HA next-generation firewalls with IPS, SSL inspection, application control and segmented zones, plus ZTNA replacing legacy remote-access VPN.

  • Fortinet, Palo Alto or Check Point
  • MFA and conditional access

Managed detection & response

EDR/XDR agents feeding a SIEM watched around the clock, with documented playbooks, containment authority and a monthly threat report.

  • Median detection under 10 minutes
  • Retained incident-response hours

Assess & comply

Vulnerability assessment, internal and external penetration testing, phishing simulation and a prioritised remediation roadmap you can budget against.

  • ISO 27001, PCI DSS, CBI guidance
  • Board-ready reporting

Microsoft 365 modern workplace

Tenant hardening, Exchange and file migration, Teams governance, Intune device enrolment, Defender rollout and licensing optimisation.

  • Zero-downtime cutover method
  • End-user adoption training

Meeting rooms & collaboration

Teams and Zoom Rooms, MAXHUB interactive panels, ceiling microphone arrays, PTZ cameras and one-touch join across every room size.

  • Huddle to boardroom to auditorium
  • Remote room health monitoring

IP telephony & contact centre

3CX, Yeastar or Grandstream platforms with SIP trunking, IVR, call recording, queues, wallboards and softphone or handset endpoints.

  • On-prem, hosted or hybrid
  • CRM and ERP integration

Multi-branch SD-WAN

Zero-touch branch appliances with dual-carrier failover, application-aware routing, central policy and per-site performance dashboards.

  • Deploy a branch in under a day
  • Integrated firewall & segmentation

Quick-deploy site kit

Pre-built, pre-configured rack in a rugged enclosure: switching, firewall, UPS, Wi-Fi, VSAT or LTE uplink and CCTV, shipped ready to power on.

  • Built for rigs, camps and remote sites
  • Solar and generator power options

Central monitoring

Every device, circuit and UPS in one NMS with thresholds, escalation and capacity trending, so you find out before your users do.

  • Zabbix, PRTG or ManageEngine
  • Monthly service review pack
How we work

A delivery method you can hold us to

The same four stages on a ten-user office and a forty-rack data hall. Only the depth changes.

01

Discover

Site survey, stakeholder interviews and a documented picture of what you actually have, before anyone proposes anything.

02

Design

Low-level design, bill of materials, rack elevations and a migration plan with rollback. Reviewed with you, then frozen.

03

Deploy

Staged build and pre-configuration in our lab, out-of-hours cutover, acceptance testing against the agreed criteria.

04

Operate

Monitoring, patching, backups, service desk and quarterly reviews, with capacity and lifecycle planning built in.

Selected work

Projects, and what changed afterwards

All case studies
Data centre rack row with structured fibre patching
BankingData Center

Dual-site data center for a commercial bank

A 42-rack primary hall and a synchronously replicated DR site, delivered in eleven months without a single unplanned outage to core banking.

42Racks built
<15 minRTO achieved
Copper patch panel with labelled ports
Oil & GasSD-WAN

46-site SD-WAN refresh across three governorates

Replaced a patchwork of leased lines and consumer routers with a single managed fabric using dual carriers, VSAT fallback and central policy.

46Sites migrated
-38%WAN spend
Backlit circuit schematic
FMCGSecurity

Ransomware recovery and SOC onboarding

Contained an active intrusion, restored production from immutable backups and rebuilt the environment on a segmented, monitored design.

31 hTo full production
0Ransom paid
Technology partners

Authorised where it matters

Partner status gives us pricing, escalation paths and pre-sales engineering direct from the vendor, which is what turns a support ticket into a fix.

Client voices

What it is like to work with us

They were the only bidder who surveyed every floor before quoting. The as-built pack they handed over is now the reference our own team works from.
Head of IT InfrastructureCommercial bank · Erbil
We called at 02:40 on a Friday. An engineer was on the bridge in eleven minutes and on site before shift start. That is the whole reason we renewed.
Operations DirectorEnergy services · Basra
Migrating 3,200 mailboxes over one weekend with no lost mail and no help-desk storm on Monday. I did not think that was realistic here.
ICT ManagerPrivate university · Sulaymaniyah

Let’s look at your environment before anyone talks about products.

A free, no-obligation assessment: we survey your sites, review your architecture and give you a written findings report with a prioritised roadmap that is yours to keep, whoever you buy from.

Typical assessment

  • 2–5 working days on site
  • Network, security & facility review
  • Risk register & costed roadmap
  • Executive readout session