Home / Cyber Security

Cyber Security & SOC

Defence in depth — designed, deployed and watched around the clock.

Cyber Security 8 capabilities 6 delivery stages Stack: Fortinet · Palo Alto Networks · Cisco

Threats are faster and more automated every year. We help organisations in Saudi Arabia and Egypt build layered defences, meet regulatory frameworks and detect and respond to incidents quickly — with leading vendors such as Fortinet, Palo Alto Networks, Cisco, Symantec, Kaspersky, Sophos, Bitdefender, Forescout and AlgoSec.

See all capabilities →

What you get

Risk & gap assessment
Security architecture & roadmap
Implemented and tuned controls
SOC reports & incident playbooks
Compliance evidence pack
Awareness training

Outcomes we measure

Mean time to detectMean time to respondCritical vulnerabilitiesCompliance score

Talk to an expert

Share your requirements — our team responds within one business day.

Start onboarding Contact sales

Network security

NGFW, IPS and secure SD-WAN with Fortinet, Palo Alto Networks and Cisco.

Network access control

Forescout device visibility and NAC, including OT and IoT.

Firewall policy management

AlgoSec rule clean-up, change automation and compliance reports.

Endpoint & email

EDR/XDR, anti-phishing and device control.

Identity & access

MFA, privileged access management, zero-trust access.

Data protection

DLP, encryption and DigiCert certificate lifecycle.

Threat intelligence & digital risk

STYX monitoring of dark web, brand abuse and leaked credentials.

SOC & incident response

SIEM monitoring, threat intelligence and response playbooks.

01AssessRisks & gaps.
02DesignTarget architecture.
03ImplementControls & tools.
04MonitorSOC 24/7.
05RespondContain & recover.
06ImproveLessons & audits.

KPI

Mean time to detect

MTTD

KPI

Mean time to respond

MTTR

KPI

Critical vulnerabilities

Open beyond SLA

KPI

Compliance score

Controls implemented

Reference design — adapted to your environment, vendors and compliance requirements during discovery.

Cyber security – defence in depth & SOC · reference design

Choose a scenario to watch it unfold through the design.

02:03EDR detects mass file encryption on a laptop and kills the process.
02:04The SIEM correlates the alert; the SOAR playbook isolates the device from the network.
02:05NAC quarantines the switch port and the firewall blocks the command-and-control address.
02:17The on-call analyst confirms containment and starts the investigation.

Outcome Contained in 14 minutes · no data lost · clean restore from backupMTTD 1 min, MTTR 14 min, 0 encrypted servers

09:10The email gateway quarantines most messages; one user clicks a link that slipped through.
09:11MFA and conditional access stop the stolen password from being used.
09:20Digital-risk monitoring finds the look-alike domain and starts a takedown.
09:25All copies are purged from mailboxes and users get a short awareness note.

Outcome No account takeover · look-alike domain taken down0 compromised accounts, 100% messages purged

Day 1OT visibility spots unusual traffic from a production controller.
Day 1Firewall policies are checked for the risky path and tightened without stopping production.
Day 1Network segmentation keeps the controller away from corporate systems.
Day 2The vendor patches the firmware; the case is closed with lessons learned.

Outcome Production kept running · risky path closed0 hours downtime

Frameworks (KSA)	NCA Essential Cybersecurity Controls (ECC), SAMA Cyber Security Framework, PDPL
Frameworks (Egypt)	Personal Data Protection Law, sector regulator requirements
International	ISO/IEC 27001, NIST CSF, PCI DSS, CIS Controls
Vendors	Fortinet, Palo Alto Networks, Cisco, Broadcom (Symantec), Kaspersky, Sophos, Bitdefender, Forescout, AlgoSec, STYX, Micro AI, DigiCert
Monitoring	SIEM / SOAR, threat intelligence, attack-surface monitoring