Technology partners

Our role is to make the platform work: design, installation, rule tuning, daily operation and reporting. Most of our clients already own tools that are not fully enabled, so we start by reviewing what is in place before proposing any purchase.

We have installation and operations experience on Splunk and work on other platforms common in the Kingdom within the categories below. When we recommend a product, we explain the reasoning and the alternatives we considered.

SIEM and SOAR

Log collection, event correlation and response automation: the foundation of the managed SOC. We design log sources, detection rules and automated playbooks.

EDR and XDR

Detection and response across endpoints, servers, identity and email, connected to the SOC for unified response.

Network security

Next-generation firewalls, intrusion detection and prevention, micro-segmentation, network access control, email security and web application firewalls.

Identity and access management

Identity governance, multi-factor authentication, privileged access management and single sign-on within a zero-trust model.

Data security

Data classification, data loss prevention, encryption, digital rights management and mobile device protection.

Cloud

Assessment and hardening of public and hybrid cloud environments, workload protection and cloud security posture management.

GRC platforms

Platforms for managing the control register, risks and third parties, and mapping evidence to NCA, SAMA and PDPL requirements.

Vendor logos and names appear on this page once each vendor's partner programme has approved their use under its brand terms. Until then we list categories only. If you need confirmation of a specific partnership as part of a vendor assessment, request it through the due-diligence pack in the trust centre.