Cipher
- Company typePrivate
- Founded2021
- HeadquartersRiyadh, Saudi Arabia
- Headcount251–500
- GTM typeB2B
- OfferingServices
Cipher firmographics
Firmographics- Name
- Cipher
- Legal name
- Cipher
- Website
- https://cipher.com.sa
- Company type
- Private
- Founded year
- 2021
- Operating status
- Operating
- Headcount range
- 251–500 employees
- Ownership category
- akta.pro rank
Cipher industry classification
Industry- Product category
- Managed Cybersecurity Services
- NAICS
- Computer Systems Design and Related Services (54151), Security Systems Services (except Locksmiths) (561621)
- akta.pro primary industry
- Vulnerability Management & Penetration Testing Services (BPAEADAD)
- akta.pro secondary industry
- Endpoint Security for End Users (EDR/XDR, Patch/Vuln, Zero Trust Endpoint) (BPAEAIAG)
Keywords
Where Cipher is headquartered
LocationHeadquarters
- HQ city
- Riyadh
- HQ country
- Saudi Arabia
- HQ region
- Middle East
Offices3 records
Markets served
Cipher business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Managed Security Services (SOC-as-a-Service): Cipher operates as an MSSP offering 24/7 managed SOC services, providing continuous security monitoring, threat detection, and incident response. These are recurring subscription-type engagements with enterprise and government clients.
- Professional Cybersecurity Services: One-time and project-based engagements including DFIR (Digital Forensics and Incident Response), penetration testing, compromise assessments, GRC advisory, compliance assessments, and cybersecurity engineering. Revenue is recognized per engagement or project.
- AI & Innovation Platform Subscriptions: Cipher AI, Cipheria (LMS), and Auto GRC represent innovative platform offerings delivered as part of the managed services suite, potentially available on subscription or per-seat models for enterprise clients.
Go-to-market motion3 records
Distribution channels3 records
Marketing channels7 records
Cipher product offering
Product offeringCore offering
Cipher is a Saudi-based managed security services provider that delivers enterprise and government cybersecurity services across six pillars: Security Operations Center (24/7 SOC monitoring, threat detection, incident response), Digital Forensics and Incident Response (DFIR), Cyber Threat Intelligence and Brand Protection, Governance/Risk/Compliance (GRC), Technical Assessment (penetration testing, vulnerability assessments, security engineering), and Security Awareness training. It complements these services with a proprietary innovation suite — Cipher AI (conversational AI security assistant), Cipheria (awareness LMS), and Auto GRC (automated compliance) — delivered primarily to large enterprises and government entities across the Middle East, Europe, and the Levant.
Differentiator
Problem solved
Functional benefit
Brands
- Cipher AI: The first AI security platform in the Middle East - a Saudi-made artificial intelligence platform designed for businesses with focus on local context and business needs within Saudi Arabia and the broader Middle East region
- Cipheria
- Auto GRC
Products and services
- Managed Security Operations Center (SOC) Round-the-clock security monitoring, threat detection, incident response, threat hunting, and security log management delivered by expert SOC analysts. Integrates with Threat Intelligence Platforms (TIPs) and SOAR solutions. Targeted at enterprise and government clients needing continuous security operations without building in-house SOC capability.
- DFIR & Incident Response Services Digital Forensics and Incident Response services including Incident Response Retainer (rapid containment, evidence preservation, stakeholder communication), Compromise Assessment, and Incident Response Plan development. Delivered to enterprise and government clients facing active or suspected cybersecurity incidents.
- Cyber Threat Intelligence & Brand Protection Real-time cyber threat intelligence combined with brand protection services including trademark monitoring, counterfeit detection, domain protection, social media protection, and actionable intelligence to safeguard brand integrity from online fraud and counterfeiting. Targeted at enterprises needing proactive threat awareness and brand defense.
- Governance, Risk and Compliance (GRC) Services Strategic governance, proactive risk management, and seamless regulatory compliance services across NCA, SAMA, SDAIA, ISO, SOC2, and NIST frameworks. Turn compliance into a competitive advantage for enterprise and government clients.
- Technical Assessment & Security Engineering Expert-led penetration testing, red teaming, vulnerability assessment, security architecture reviews, and cybersecurity engineering services. Simulates real-world attacks and assesses defenses to expose weaknesses before attackers do. Targeted at enterprises needing offensive security validation and architecture hardening.
- Cybersecurity Awareness Training Expert-led cybersecurity awareness programs including engaging workshops, interactive events, and practical resources to empower employees with knowledge to safeguard personal and organizational assets. Targeted at organizations seeking to build a strong security culture and resilience.
- Cipher AI The first AI security platform in the Middle East — a Saudi-made conversational AI solution similar to global AI models like ChatGPT but focused on the local context and business needs within Saudi Arabia and the broader Middle East region. Functions as a conversational AI security assistant processing and generating human language.
- Cipheria A Learning Management System (LMS) platform used to create, manage, deliver, and track cybersecurity awareness content and training programs. Provides a centralized platform where organizations can train employees, monitor progress, and evaluate learning outcomes.
- Auto GRC An automated Governance, Risk, and Compliance platform with pre-built frameworks for Saudi NCA, SAMA, SOC2, ISO, and NIST. Enables organizations to automate, align, and scale their compliance operations against these regulatory standards.
Quantifiable outcome
- Over 1 million vulnerabilities reported across client engagements
- +3 more outcomes
Companies that use Cipher
Customer profileNamed customers1 record
Segments3 records
Ideal customer profiles4 records
Cipher technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability4 records
Feature6 records
Cipher partnerships and signals
Strategic signalPartnerships
Nine partnerships are on record, tiered core, minor and flagship.
- CREST (Council of Registered Ethical Security Testers)coreCipher became a founding member of CREST of AI and its nine principles, a global initiative promoting responsible, transparent, and trusted AI practices in cybersecurity. This reaffirms Cipher's commitment to supporting responsible AI use and enhancing confidence in AI within the cybersecurity ecosystem.
- MDC (Technical Arm of Syria's White Room Holding Group)coreCipher and MDC signed a strategic contract to establish Syria's first Tier III Data Center and an advanced Cyber Operations Center (SOC) on Syrian territory. This partnership establishes a secure and reliable national digital infrastructure for Syria as part of its post-reconstruction digital transformation.
- Syrian Computer Society (SCS)coreCipher signed an MoU with MDC and the Syrian Computer Society (SCS) to establish Syria's first Center of Expertise and Excellence for Information Technology and Cybersecurity, aimed at building digital talent and cybersecurity capabilities in Syria.
- King Saud University / Entrepreneurship Institute – Innovation CenterminorCipher signed an MoU with King Saud University (represented by the Entrepreneurship Institute – Innovation Center) to strengthen integration between the academic sector and the cybersecurity industry, focusing on developing national capabilities and establishing leading cybersecurity companies and products.
- Phosphorus Cybersecurity Inc.flagshipDuring Black Hat MEA, Cipher signed an MSSP (Managed Security Services Provider) agreement with Phosphorus Cybersecurity Inc., enabling Cipher to deliver specialized, fully managed security solutions for IoT and smart cities, ensuring comprehensive protection for clients.
- Ministry of Investment (Saudi Arabia)flagshipDuring Black Hat MEA, Cipher officially launched Cipher Europe and Cipher Al-Sham in partnership with the Saudi Ministry of Investment, opening new horizons for global expansion and strengthening Saudi cybersecurity services' presence in new international markets.
- Ministry of Communications and Technology (Syrian Arab Republic)coreCipher announced a strategic partnership with Syria's Ministry of Communications and Technology to support and build digital infrastructure, enhance the cybersecurity sector's position, and jointly establish an advanced Cybersecurity Center — the first of its kind in Syria. The partnership focuses on enhancing national talent competencies, developing intelligent solutions to counter digital threats, and supporting local innovation.
- TF-CSIRT (European Computer Emergency Response Team)flagshipCipher became the first company in the Middle East and North Africa to join the prestigious European TF-CSIRT membership for cyber incident response. This membership reinforces Cipher's commitment to enhancing cybersecurity regionally and globally and cements the Kingdom's position in leading secure digital transformation.
- Saudi Federation for Cybersecurity, Programming, and Drones (Black Hat 2024)flagshipCipher was a strategic partner for Black Hat 2024, held at the Riyadh Exhibition and Convention Center in Malham, north of Riyadh. The event was organized by the Saudi Federation for Cybersecurity, Programming, and Drones in collaboration with Informa Global and the Event Investment Fund. Cipher used this platform to announce the SAR 50 million investment from Impact46.
Scale indicators8 records
Recent moves8 records
Expansion highlights6 records
Cipher competitors and assessment
Company assessmentBroad incumbents
- Mandiant (Google Cloud): Now part of Google Cloud, Mandiant is a global leader in incident response, threat intelligence, and managed detection. Directly comparable to Cipher's DFIR, CTI, and managed SOC services, and a competitor for high-end enterprise and government incident response retainers.
- CrowdStrike: Global cybersecurity leader offering Falcon platform with EDR/XDR, threat intelligence, and managed services. Not a direct competitor in localized GRC/awareness but a broader incumbent whose MSSP partnerships and Falcon Complete overlap with Cipher's managed SOC offering.
- Palo Alto Networks: Global cybersecurity platform company with Unit 42 incident response and managed security services. Comparable to Cipher's DFIR and SOC capabilities, but operates as a much larger vendor with broader product portfolio and global reach.
Direct peers
- Help AG: Middle East-focused MSSP and cybersecurity services provider headquartered in the UAE, acquired by e& (Etisalat). Directly comparable to Cipher as a regional MSSP offering managed SOC, GRC, pen testing, and advisory to enterprise and government clients across MENA.
- Sirar by stc: Cybersecurity arm of Saudi Telecom Company (stc) providing managed security services, SOC, and consulting to Saudi enterprises and government. Most direct competitor to Cipher in the Saudi MSSP market with similar Vision 2030 alignment and government relationships.
- DarkMatter Group: UAE-based cybersecurity services firm offering managed security, cyber advisory, and digital forensics to government and enterprise clients in MENA. Comparable to Cipher in scope of services, regional focus, and government client mix.
- NCC Group: UK-listed global cybersecurity services and MSSP offering penetration testing, incident response, managed detection, and compliance advisory. Closely comparable to Cipher's full-stack services model with strong EMEA enterprise presence.
- Secureworks: US-based pure-play MSSP offering managed detection and response, threat hunting, and incident response globally. Comparable to Cipher's SOC-as-a-service model and recurring revenue approach.
- Trustwave: Global MSSP and cybersecurity services provider (acquired by Singtel/Optus) offering managed detection, pen testing, DFIR, and GRC consulting. Comparable to Cipher across the full MSSP service stack.
Regional players
- Injazat: UAE-based cybersecurity and digital transformation provider serving government and enterprise clients in MENA. Comparable to Cipher in regional positioning and government-heavy client base, though broader in IT services scope.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
Cipher social profiles
Digital presenceCipher financial estimates
Financial estimateRevenue estimate
Valuation estimate
Cipher leadership team
Management profileNumber of profiles
Profiles9 records
Cipher subsidiaries and ownership
Company hierarchySubsidiaries2 records
Cipher funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Cipher M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Cipher
What does Cipher do?
Cipher is a Saudi-based managed security services provider that delivers enterprise and government cybersecurity services across six pillars: Security Operations Center (24/7 SOC monitoring, threat detection, incident response), Digital Forensics and Incident Response (DFIR), Cyber Threat Intelligence and Brand Protection, Governance/Risk/Compliance (GRC), Technical Assessment (penetration testing, vulnerability assessments, security engineering), and Security Awareness training. It complements these services with a proprietary innovation suite — Cipher AI (conversational AI security assistant), Cipheria (awareness LMS), and Auto GRC (automated compliance) — delivered primarily to large enterprises and government entities across the Middle East, Europe, and the Levant.
Is Cipher a public or private company?
Cipher is a private company. It is classified as venture growth investor backed and is currently operating.
When was Cipher founded?
Cipher was founded in 2021. It employs 251 to 500 people.
Where is Cipher based?
Cipher is headquartered in Riyadh, Saudi Arabia, in the Middle East region.
How does Cipher make money?
Three revenue lines are on record. Managed Security Services (SOC-as-a-Service) is the primary driver. The others are professional Cybersecurity Services and AI & Innovation Platform Subscriptions.
Who are Cipher's main competitors?
Broad incumbents on record are Mandiant (Google Cloud), CrowdStrike and Palo Alto Networks. Direct peers are Help AG, Sirar by stc, DarkMatter Group, NCC Group, Secureworks and Trustwave. Injazat is listed as a regional player.
Does Cipher have an API?
No public API is recorded for Cipher.
What industry is Cipher in?
Cipher's product category is Managed Cybersecurity Services. Its primary akta.pro industry code is BPAEADAD, Vulnerability Management & Penetration Testing Services, with a secondary code of BPAEAIAG, Endpoint Security for End Users (EDR/XDR, Patch/Vuln, Zero Trust Endpoint). Its NAICS code is 54151.