Security assessment
A review of your systems, accounts and network exposure that ranks the risks and the fixes.
ServiceCybersecurity
Cybersecurity services for companies, built into your systems
O AI provides cybersecurity services for companies from Al Khobar. Our in-house team reviews your systems and access, tests your web and mobile apps for weaknesses, hardens your cloud setup, maps your controls to the NCA Essential Cybersecurity Controls, and builds security into the software we develop rather than adding it at the end.
What we cover
What our cybersecurity services cover
Web and mobile app testing
Testing of your websites, apps and APIs for common weaknesses, with a report your developers can act on.
NCA ECC gap review
A comparison of your current controls with the National Cybersecurity Authority's Essential Cybersecurity Controls, and a plan for the gaps.
Access control and MFA
Role-based permissions, multi-factor authentication and regular access reviews across your systems.
Secure development
Code reviews, dependency checks and secure defaults in new and existing software.
Logging and monitoring
Audit logs that show who did what, and alerts that flag unusual activity.
How we work
How we strengthen your security
Free consultation
We learn which systems matter most to your business and what concerns you about them.
Assess
We review your systems, access and apps and rank the findings by risk.
Fix
We fix what we can in your systems and software, and guide your team on the rest.
Verify
We retest the fixes and give you a written report of what changed.
Keep watch
We set up logging, access reviews and periodic retesting, so security keeps pace with your systems.
Our own products
Security we built into our own products
Rushd, our law-firm software, has role-based permissions, optional MFA on all accounts, IP allowlisting and an audit log.
In Rushd, each firm's data is isolated and encrypted in transit and at rest, and staff access is limited and logged.
Rushd admins can review login history and terminate sessions, and our team in Al Khobar built these controls in-house.
Questions
Common questions
How is the cost of cybersecurity services set?
Pricing is project-based. The cost depends on the systems and apps in scope, the depth of testing and whether we also fix the findings. We send a written quote after a free consultation.
How long does a security assessment take?
It depends on the number of systems and how complex they are. We agree the timeline in the proposal, and we report urgent findings as soon as we find them rather than at the end.
What are the NCA Essential Cybersecurity Controls?
They are the minimum cybersecurity controls set by Saudi Arabia's National Cybersecurity Authority for government entities and for organizations that own, operate or host critical national infrastructure. Other companies also use them as a practical reference, and our guide explains them in plain terms.
Can you promise we will never be hacked?
No one can honestly promise that. What we do is reduce the risk, shorten the time it takes to spot a problem and help you prepare a plan for responding to one.
Do you only secure systems you built?
No. We review and test systems built by other vendors too, and in the software we build, security is part of the work from the first design.
Guides
Read more on our blog
Cybersecurity for companies in Saudi Arabia: what it is, types and first steps
What cybersecurity means under NCA's definition, the main types a company has to cover, which rules apply to government affiliates, CNI operators, large firms and SMEs, the Saudi market in numbers, and a first 90-day plan.
NCA Essential Cybersecurity Controls (ECC): who must comply, with a readiness checklist
The ECC binds government agencies, their affiliates and private operators of critical infrastructure; other companies fall under NCA's separate private-sector controls or none. The scope in NCA's words, the 2024 changes, surprising requirements and a 12-point readiness checklist.
The importance of cybersecurity for business: breach costs and a 10-point checklist
What a data breach costs a company, which NCA controls bind small and medium companies, and a protection checklist with a worked cost example.
When were your systems last tested?
Book a free consultation and we will agree what to assess first.
We reply within one business day.