CPX
CPX is an Abu Dhabi-headquartered, G42-owned cybersecurity company delivering managed security, advisory, and AI-native platforms (Resonance, SilkRunner, SilkNet, UAEComply.360°) to government, financial, and critical infrastructure organisations across the UAE and GCC.
- Company typePrivate
- Founded2022
- HeadquartersAbu Dhabi, United Arab Emirates
- Headcount501–1,000
- GTM typeB2B
- OfferingServices
What CPX does
CPX Holding is an Abu Dhabi-headquartered, G42-owned cybersecurity company founded in 2022 that delivers end-to-end cyber and physical security solutions to governments, financial institutions, critical infrastructure operators, and large enterprises across the UAE and GCC. Organised around three service pillars — Advise (strategy, GRC, security testing, cyber academy), Protect (security architecture, IAM, endpoint, data, application, network, cloud, OT, physical), and Operate (MXDR, DFIR, threat hunting, CTEM, managed cyber operations, NOC) — the company pairs professional and managed services with an expanding proprietary product portfolio anchored by UAEComply.360°, Resonance (AI-native external exposure management inherited from the May 2025 SpiderSilk acquisition), SilkRunner (agentic SOC platform supporting multiple large language models including private deployments), and SilkNet (investigative intelligence graph), alongside a UAE E-invoicing Platform co-developed with SpendConsole and a Crypto Defense Solution aligned with VARA and UAE IA requirements.
Underlying the offering is a sovereign UAE-based operating model that combines 24/7 UAE-located SOC capabilities, regulatory alignment with the UAE Cyber Security Council's National Cybersecurity Policies and UAE IA Standard v2.0/v2.1, and integration within the G42 AI ecosystem, augmented by a strategic co-development partnership with Microsoft for public-sector SOC-as-a-Service. The proprietary platforms are differentiated by agentic AI automation, sovereign on-premises/air-gapped deployment options, compliance mapping to 70+ frameworks, and a knowledge graph supporting single-organisation to national-ecosystem investigations.
CPX monetises primarily through recurring managed security services subscriptions (MXDR, managed cyber operations, vulnerability remediation), project-based professional/advisory engagements, and software/platform licensing for its proprietary products, with enterprise quote-based contracts and no public pricing. Customer acquisition relies on direct enterprise and government field sales, G42 ecosystem cross-sell, Microsoft co-sell, and SI/consulting partners. The company serves 200+ public and private sector clients across 14+ national transformation projects and protects 100,000+ end users, holding the only SOC-CMM Gold Partner status in the region and recognised through multiple UAE Cybersecurity Excellence Awards.
CPX firmographics
Firmographics- Name
- CPX
- Legal name
- CPX Holding
- Website
- https://cpx.net
- Company type
- Private
- Founded year
- 2022
- Operating status
- Operating
- Headcount range
- 501–1,000 employees
- Short description
- CPX is an Abu Dhabi-headquartered, G42-owned cybersecurity company delivering managed security, advisory, and AI-native platforms (Resonance, SilkRunner, SilkNet, UAEComply.360°) to government, financial, and critical infrastructure organisations across the UAE and GCC.
- Ownership category
- akta.pro rank
CPX industry classification
Industry- Product category
- Managed Cybersecurity Services
- NAICS
- Software Publishers (51321), Computer Systems Design and Related Services (54151), Security Systems Services (56162)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Cloud Security Services (Posture Mgmt, Workload Protection) (BPAKAHAK)
- akta.pro secondary industries
- Continuous Controls Monitoring (CCM) (HDADAHAE), Application Security & Secure Software (DevSecOps) (EDAOAIAK)
Keywords
Where CPX is headquartered
LocationHeadquarters
- HQ city
- Abu Dhabi
- HQ country
- United Arab Emirates
- HQ region
- Middle East
Offices1 record
Markets served
CPX business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Managed Security Services (MSS): Ongoing managed security services including MXDR (Managed Extended Detection & Response), managed cyber operations (identity, endpoint, data, application, network security), vulnerability remediation, and NOC/ITSM. Delivered as recurring retainer contracts with service level agreements, typically annual or multi-year engagements. Constitutes the primary recurring revenue stream.
- Professional / Advisory Services: Time-and-materials or fixed-scope engagements for cyber strategy, GRC, security testing (red teaming, VAPT, purple teaming), regulatory compliance assessments, cyber academy training, cyber crisis simulations, and vCISO advisory. These are project-based professional services engagements.
- Software / Platform Licensing: Licensing of proprietary platforms including Resonance (exposure management), SilkRunner (agentic SOC), and SilkNet (intelligence graph). These may be delivered as subscription licences tied to the managed services or as standalone platform subscriptions.
- Compliance Enablement (UAEComply.360°): Compliance framework services helping organisations meet UAE IA Standard v2.0, National Cybersecurity Policies, and related regulations. Delivered as structured programmes, likely subscription or project-based.
Go-to-market motion3 records
Distribution channels4 records
Marketing channels6 records
CPX product offering
Product offeringCore offering
CPX provides end-to-end cybersecurity services organised in three pillars: Advise (cyber strategy, GRC, security testing, cyber academy), Protect (security architecture, IAM, endpoint, data, application, network, cloud, OT, physical), and Operate (MXDR, DFIR, threat hunting, CTEM, managed cyber operations). The company develops and licenses proprietary AI-native platforms—Resonance (exposure management), SilkRunner (agentic SOC), SilkNet (intelligence graph), UAEComply.360° (compliance framework), and the UAE E-invoicing Platform—delivered from sovereign UAE-based operations serving enterprises, governments, and critical infrastructure operators across the UAE and GCC.
Product overview
CPX is a comprehensive cyber and physical security solutions provider organized around three core pillars: Advise (consulting and advisory services), Protect (design and deployment of security controls), and Operate (managed security operations and services). The company offers an integrated portfolio of proprietary products including UAEComply.360° (compliance framework), Resonance (AI-native external exposure management), SilkRunner (agentic SOC platform), and SilkNet (intelligence graph), alongside a broad range of professional services spanning cybersecurity strategy, OT security, AI governance, managed detection and response, digital forensics, and physical security. As a G42 company headquartered in Abu Dhabi, CPX serves enterprises, governments, and critical infrastructure sectors across the UAE and GCC region.
Differentiator
Problem solved
Functional benefit
Brands
- Resonance: AI-native External Exposure Management platform that automatically maps internet-facing footprint with vulnerability detection, threat intelligence, dark web monitoring, brand protection, and third-party vendor risk.
- SilkRunner
- SilkNet
- UAEComply.360°
Products and services
- Resonance AI-native External Exposure Management platform that maps internet-facing attack surface, combining vulnerability detection, threat intelligence, dark web monitoring, brand protection, cloud security posture management, and third-party vendor risk into a single view enriched with CVE references, severity ratings, and 70+ compliance framework mappings. Originated from the SpiderSilk acquisition.
- SilkRunner Agentic SOC platform where AI agents triage alerts, investigate, validate, execute response actions, and produce audit-ready reporting; configurable with drag-and-drop blocks and support for multiple AI models. Enables SOC operations to scale without proportional headcount growth and is designed for on-premises, air-gapped, and SaaS deployment.
- SilkNet Pre-built investigative intelligence graph that maps internet entities (domains, IPs, certificates, credentials) and their relationships, providing analysts with a dynamic view of assets, ownership signals, and blast radius to support investigations from individual organisations to entire national ecosystems.
- UAEComply.360° Compliance-enablement framework that operationalises UAE Cyber Security Council National Cybersecurity Policies and UAE IA Standard v2.0/v2.1, transforming fragmented compliance efforts into a unified, scalable governance model with customisable services from initial assessments to full operationalisation.
- UAE E-invoicing Platform Mandate-ready e-invoicing solution developed in partnership with SpendConsole, delivered on CPX's Microsoft Azure UAE environment with AI-driven automation, cybersecurity assurance, governance, and sovereign hosting for data sovereignty and audit readiness.
- Cyber Escape Room Immersive, hands-on security awareness training delivered through team-based challenges in a gamified office environment that helps employees recognize and respond to real-world cyber and physical security risks.
- Managed eXtended Detection & Response (MXDR) 24/7 managed detection and response service providing continuous monitoring, expert analysis, and integrated security coverage across endpoints, identities, cloud, network, and logs, delivered from sovereign UAE-based operations.
- Digital Forensics, Incident Response (DFIR) & Threat Hunting Proactive threat hunting to uncover hidden attacker activity and rapid digital forensics and incident response for investigation, containment, and recovery, with structured forensic investigation and evidence-based analysis.
- Predictive Threat Intelligence Contextual, predictive threat intelligence tailored to organisational environment and threat landscape, with operational integration that converts intelligence into detections, use cases, and prioritised actions.
- Cyber Threat Exposure Management (CTEM) Continuous, risk-based validation programme that safely tests defences against real-world attack techniques, identifies how vulnerabilities and misconfigurations combine into exploitable paths, and prioritises remediation based on active exploitability.
- Crypto Defense Solution Enterprise-grade protection for digital asset ecosystems, covering wallets, smart contracts, and blockchain transactions across their lifecycle with 24/7 crypto-aware monitoring, blockchain intelligence with risk scoring and transaction tracing, and threat attribution, aligned with VARA and UAE IA and operated from a sovereign UAE base.
- Vulnerability Remediation-as-a-Service Prioritised, coordinated vulnerability remediation based on real-world risk with continuous exposure reduction, managed entirely from the UAE to meet local regulatory and data sovereignty requirements.
- Enterprise Security Architecture & Transformation Assessment of current cybersecurity posture and design of unified, business-aligned security architecture, with a roadmap for resilience, transformation, and regulatory alignment.
Quantifiable outcome
- 14+ nation-wide transformations delivered
- +5 more outcomes
Companies that use CPX
Customer profileNamed customers5 records
Segments4 records
Ideal customer profiles4 records
CPX technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability8 records
Feature7 records
CPX partnerships and signals
Strategic signalPartnerships
Eight partnerships are on record, tiered core, minor, flagship and strategic.
- UAE Cyber Security CouncilcoreCPX is a key strategic partner of the UAE Cyber Security Council, collaborating on national cybersecurity initiatives including the UAE Cyber Factory (launched May 2026 to advance national cyber sovereignty through AI-powered cybersecurity), the co-publishing of the annual State of UAE Cybersecurity Report, and major events such as SHIFT Dubai. The Council's H.E. Dr. Mohamed Al-Kuwaiti has publicly endorsed CPX's contributions to the nation's cybersecurity posture.
- SpendConsolecoreCPX partnered with SpendConsole to deliver the UAE's first AI-ready e-invoicing solution. The partnership combines SpendConsole's AI-driven e-invoicing and automation capabilities with CPX's cybersecurity assurance, governance, and secure hosting on Microsoft Azure in the UAE. The solution helps organisations comply with UAE Ministry of Finance e-invoicing mandates while maintaining data sovereignty and audit readiness.
- IDEA HR, LinkedIn, INJAZ UAEminorCPX partnered with IDEA HR, LinkedIn, and INJAZ UAE as career-readiness programme partners for the 'She Protects' initiative. IDEA HR delivered career development workshops, LinkedIn provided professional networking guidance, and INJAZ UAE contributed entrepreneurship and career preparation content for women cybersecurity students.
- Vulcan CyberminorVulcan announced strategic partnerships with G42 ecosystem companies including CPX and Astra Tech at GITEX Global 2025 to expand its GenAI security solutions in the MENA region. The partnership advances AI safety and responsible deployment within the G42 ecosystem.
- MicrosoftflagshipCPX Holding partnered with Microsoft to enhance cybersecurity systems for public sector organisations worldwide. The collaboration leverages Microsoft's security platform integrated with generative AI alongside CPX's cyber defence expertise to improve operational efficiency and security. The companies jointly developed a SOC-as-a-Service whitepaper with IDC, exploring how managed SOC services address GCC cybersecurity talent gaps and alert overload challenges.
- Rilian TechnologiesstrategicRilian Technologies signed a strategic contract with the UAE Cybersecurity Council, in coordination with CPX Holding, to secure the UAE's critical infrastructure by implementing the Rilian Defense Platform (RDP) at the National Security Operations Center (NSOC). CPX and Rilian are deploying advanced managed OT technologies and coordinating dedicated AI agents for automated cyber threat solutions. This aligns with the UAE's 2031 vision for resilient, sovereign cybersecurity infrastructure.
- Core42coreCore42, a G42 group company focused on AI enablement and sovereign cloud, is a collaboration partner within the G42 ecosystem. CPX and Core42 work together on AI security assessments, AI governance, and national cybersecurity programmes such as the UAE Cyber Factory. Core42 was listed as a strategic partner at SHIFT Dubai 2026.
- Make it in the Emirates ExhibitionminorThe UAE Cyber Factory was launched at the 'Make it in the Emirates' exhibition, an initiative showcasing national industrial and technology capabilities. CPX participated as a key collaborator with the UAE Cyber Security Council at this high-profile national platform.
Scale indicators11 records
Recent moves6 records
Expansion highlights7 records
CPX competitors and assessment
Company assessmentMarket position
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
CPX social profiles
Digital presenceCPX compliance and trust
Trust signalCompliance3 records
CPX financial estimates
Financial estimateRevenue estimate
Valuation estimate
CPX leadership team
Management profileNumber of profiles
Profiles1 record
CPX subsidiaries and ownership
Company hierarchySubsidiaries1 record
CPX funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
CPX M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about CPX
What does CPX do?
CPX provides end-to-end cybersecurity services organised in three pillars: Advise (cyber strategy, GRC, security testing, cyber academy), Protect (security architecture, IAM, endpoint, data, application, network, cloud, OT, physical), and Operate (MXDR, DFIR, threat hunting, CTEM, managed cyber operations). The company develops and licenses proprietary AI-native platforms—Resonance (exposure management), SilkRunner (agentic SOC), SilkNet (intelligence graph), UAEComply.360° (compliance framework), and the UAE E-invoicing Platform—delivered from sovereign UAE-based operations serving enterprises, governments, and critical infrastructure operators across the UAE and GCC.
Is CPX a public or private company?
CPX is a private company. It is classified as corporate owned and is currently operating.
When was CPX founded?
CPX was founded in 2022. It employs 501 to 1,000 people.
Where is CPX based?
CPX is headquartered in Abu Dhabi, United Arab Emirates, in the Middle East region.
How does CPX make money?
Four revenue lines are on record. Managed Security Services (MSS) is the primary driver. The others are professional / Advisory Services, software / Platform Licensing and compliance Enablement (UAEComply.360°).
Does CPX have an API?
No public API is recorded for CPX.
What industry is CPX in?
CPX's product category is Managed Cybersecurity Services. Its primary akta.pro industry code is BPAKAHAK, Cloud Security Services (Posture Mgmt, Workload Protection), with a secondary code of HDADAHAE, Continuous Controls Monitoring (CCM). Its NAICS code is 51321 and its SIC code is 7372.