Delivery region

    Cybersecurity Services in the UAE & Gulf

    Penetration testing, managed SOC and compliance programmes for banks, government entities and enterprises in the Gulf, with control mapping to the UAE Information Assurance Standard, DESC ISR, SAMA CSF and NCA ECC.

    Scope an engagementAll services

    What is different here

    Buying security in Middle East.

    Gulf engagements are usually driven by a named national standard rather than an international one. A Dubai entity is measured against DESC ISR, a federal one against the UAE Information Assurance Standard, a Saudi bank against SAMA CSF and NCA ECC. Findings are mapped to the specific control identifiers a local regulator or auditor will ask for.

    Frameworks we report against

    • UAE IAS and NESA
    • DESC ISR
    • SAMA CSF
    • NCA ECC
    • UAE and Saudi PDPL
    • ISO 27001

    Coverage

    4 countries, 6 cities.

    Where clients are, not where offices are. If your city is not named the answer is still yes, because the delivery model is remote-first.

    • United Arab Emirates

      AE
      • Dubai
      • Abu Dhabi

    • Saudi Arabia

      SA
      • Riyadh
      • Jeddah

    • Qatar

      QA
      • Doha

    • Bahrain

      BH
      • Manama

    Most requested

    What buyers here ask for first.

    Every service page stands alone, with scope, process and deliverables.

    FAQ

    Working in Middle East.

    01Do you have an office in Middle East?

    No. Faltrox Security is headquartered in Bengaluru, India, and delivers into Middle East remotely. Assessments, managed SOC and compliance work do not require a local office; where an engagement genuinely needs people on site, such as internal network or OT testing, practitioners travel on request. We say this plainly rather than implying a presence we do not have.

    02Which regulations do you map findings to in Middle East?

    UAE IAS and NESA, DESC ISR, SAMA CSF, NCA ECC, UAE and Saudi PDPL, ISO 27001. Every report is written against the regime that binds you, so the findings can be handed to an auditor or regulator without translation.

    03Can you work in Middle East business hours?

    Yes. Offensive testing windows and status calls follow your calendar rather than ours, and the managed SOC runs 24/7 regardless of where your estate sits. Handover notes are written for your morning, not ours.

    04Which cities in Middle East do you deliver into?

    Dubai, Abu Dhabi, Riyadh, Jeddah, Doha, Manama, and anywhere else in the region on request. The delivery model is remote-first, so this list reflects where clients are rather than where offices are.

    Other regionsIndiaUnited StatesUnited Kingdom and IrelandEuropeAsia-Pacific

    Start an engagement

    Secure what’s next.

    Speak with the engineering team to define scope, walk through the methodology, and decide whether Faltrox is the right team to test and run your environment.

    Contact us