What Cyberani Solutions does

Cyberani Solutions is a Saudi Arabian cybersecurity services provider operating as the managed security services division of Aramco Digital, headquartered in Riyadh with a second operations site in Dhahran. The company was founded in 2021 and serves large enterprises, government agencies, and industrial operators in Saudi Arabia and the broader MENA region, with a stated focus on protecting both IT and OT environments. Its core offering is a 24/7 Managed Security Operations Center (MSOC) service, delivered from two geographically distributed sites that are licensed Tier 1 by the National Cybersecurity Authority — the highest credential available to MSSPs in the Kingdom. The portfolio spans Managed Security Operations (MDR, MSOC, Cybersecurity Monitoring, Brand Protection, Threat Intelligence), GRC services (strategy, program, risk, compliance and maturity assessments, awareness), Offensive Cybersecurity (vulnerability assessment, penetration testing, source code review, red teaming, mobile/web app assessment, Purple Teaming), OT Cybersecurity (OT GRC, OT pen testing, OT asset discovery, OT DFIR, OT cybersecurity program and projects), and DFIR services (Compromise Assessment, Tabletop Exercise, Incident Response Retainer with 60–250+ hour flexible SLAs). The company also operates a value-added reseller business integrating solutions from Palo Alto Networks, Cisco, Mandiant, CrowdStrike, RSA, Fortinet, Group-IB, and Darktrace.

The underlying technology stack combines commercial SIEM, SOAR, and UEBA platforms with AI/ML-driven behavioral analytics, real-time threat intelligence (including dark web monitoring and OSINT), and proprietary products. CyLnx is a tunnel-less Zero Trust SaaS connectivity platform with adaptive encryption and multi-cloud integration offered on subscription; CyMark is a cryptographic watermark solution that embeds machine- and user-linked identities into documents and images for traceable data leak detection. Revenue is generated through recurring managed services subscriptions, project-based professional services and incident response retainers, proprietary product subscriptions, and VAR margins on third-party cybersecurity technology resale. The company is governed by a board comprising senior Aramco executives and led by CEO Saeed AlSaeed, with a CISO, CFO, CPTO, CSO, CCO, CDO, and CCSO rounding out the leadership team, and operates with a 100% Saudi workforce aligned to national content requirements.

Name

Cyberani Solutions

Legal name

Middle East Information Technology Solutions

Website

https://cyberani.sa

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

251–500 employees

Short description

Cyberani Solutions is the managed security services division of Aramco Digital, operating two Tier 1 NCA-licensed 24/7 SOCs in Riyadh and Dhahran to deliver MDR, OT security, GRC, offensive testing, DFIR, and proprietary CyLnx and CyMark products to Saudi enterprises, government, and industrial clients.

Ownership category

akta.pro rank

Product category

Managed Cybersecurity Services

NAICS

Computer Systems Design and Related Services (54151)

akta.pro primary industry

Vulnerability Management & Penetration Testing Services (BPAEADAD)

akta.pro secondary industry

Cybersecurity Architecture & Security Integration (BPAEAAAL)

Keywords

• Managed security services
• Cybersecurity operations center
• GRC consulting services
• Penetration testing services
• OT cybersecurity

Headquarters

HQ city

Riyadh

HQ country

Saudi Arabia

HQ region

Middle East

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Infrastructure, Operations, Marketing or Sales, Supply Chain

Revenue model

1. Managed Security Operations Services: Recurring managed security services including 24/7 SOC monitoring, detection, and response (MDR/MSOC). Delivered through subscription-based service level agreements providing continuous protection across IT and OT environments.
2. Professional Cybersecurity Services: Offensive security services (penetration testing, red teaming, vulnerability assessment), GRC consulting services, incident response, digital forensics, and OT cybersecurity assessments delivered as project-based or retainer engagements.
3. Value-Added Reseller (VAR): Revenue generated from reselling leading cybersecurity technology solutions including cloud security, network security, endpoint security, data security, zero-trust security, and SIEM solutions from global technology vendors.
4. CyLnx Subscription Model: CyLnx product offered as subscription-based OPEX model eliminating capital expenditure, with scalable subscription plans aligned with organizational needs and budgets for secure connectivity services.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels6 records

Core offering

Cyberani Solutions delivers managed cybersecurity services through two Tier 1 NCA-licensed Security Operations Centers in Riyadh and Dhahran, providing 24/7 MDR, MSOC monitoring, threat intelligence, and incident response across IT and OT environments. Its portfolio spans GRC advisory, offensive security (penetration testing, red/purple teaming, source code review), specialized OT cybersecurity, DFIR retainers, and integration services reselling third-party cybersecurity technologies. The company also sells two proprietary products, CyLnx (Zero Trust tunnel-less secure connectivity SaaS) and CyMark (cryptographic watermark solution for data leak prevention).

Product overview

Cyberani Solutions offers a unified portfolio of next-generation cybersecurity products and services for organizations in Saudi Arabia and the Middle East. The company operates two main product brands—CyLnx (a tunnel-less SaaS secure connectivity solution featuring Zero Trust, adaptive encryption, and multi-cloud integration) and CyMark (a cryptographic watermark solution for data leak prevention and traceable leak detection)—alongside an extensive managed security services suite. The services are organized into five categories: Managed Security Operations (MDR, MSOC, Cybersecurity Monitoring, Brand Protection, Threat Intelligence), GRC Services (Cybersecurity Strategy, Program, Awareness, Risk Assessment, Compliance Assessment, Maturity Assessment), Offensive Cybersecurity (Vulnerability Assessment, Penetration Testing, Source Code Review, Red Teaming, Mobile/Web App Assessment, Purple Teaming), OT Cybersecurity (OT GRC, Maturity Risk Assessment, Penetration Testing, Architectural Assessment, Asset Discovery, DFIR, Cybersecurity Program, Projects), and DFIR (Compromise Assessment, Tabletop Exercise, Incident Response Retainer). The company also provides Integration Services as a value-added reseller for third-party cybersecurity technologies.

Differentiator

Problem solved

Functional benefit

Brands

• CyLnx: Next-gen Secure Connectivity - A tunnel-less SaaS solution built to accelerate and secure organizations' connectivity demands, featuring Zero Trust model, adaptive encryption, and granular network segmentation.
• CyMark

Products and services

• CyLnx Next-generation tunnel-less SaaS secure connectivity solution with Zero Trust model, adaptive encryption, granular network segmentation, and multi-cloud integration for distributed and cloud environments.
• CyMark Innovative watermark solution that embeds cryptographically linked watermarks tied to user and machine identities, with real-time timestamp updates every minute, enabling traceability of data leaks and unauthorized distribution of information.
• Managed Detection and Response (MDR) Comprehensive 24/7 threat monitoring, detection, and rapid incident response service protecting organizations from advanced cyber threats using behavioral analytics, machine learning, and real-time threat intelligence.
• Managed Security Operations Center (MSOC) Fully managed always-on cybersecurity service providing real-time monitoring, rapid threat detection, and swift incident response for both IT and OT environments. NCA-licensed Tier 1 MSOC service.
• Brand Protection Service safeguarding digital assets, reputation, and intellectual property from online threats including brand impersonation, trademark infringement, and malicious actors.
• Threat Intelligence Service involving gathering, analyzing, and utilizing information about potential or existing cyber threats combining human expertise with advanced threat intelligence platforms including dark web monitoring.
• Incident Response Retainer Subscription-based incident response support service providing rapid detection and response to cyberattacks through retainer-based SLA with flexible pricing models ranging from 60 to 250 hours.
• Compromise Assessment Advanced assessment using artifact analysis, threat intelligence, behavioral analytics, and wide-scale binary analysis to identify hidden threats and potential breaches proactively.
• Penetration Testing Service combining manual operations with industry-leading penetration testing tools covering on-premises and cloud-based enterprise infrastructures including hardware, software, web and mobile apps.
• Red Teaming Simulated adversarial attack service using tactics, techniques, and procedures (TTPs) of actual adversaries to test organizational defenses under true-to-life conditions.
• Purple Teaming Service combining red team and blue team approaches to enhance organizational incident response capabilities by challenging existing processes.
• Vulnerability Assessment Proactive vulnerability scanning service using advanced scanners to identify attack vectors including Log4Net, ProxyNotShell, and other malware/ransomware vectors for preventive threat identification.
• Source Code Review Service detecting and rectifying security and design flaws in source code before product release, assessing authentication flaws, data leakages, SQL injection, and Cross-Site Scripting (XSS).
• Mobile App Assessment Security testing service for mobile applications identifying vulnerabilities including malware, third-party API risks, authentication weaknesses, encryption vulnerabilities, and jailbreaking.
• Web App Assessment Service examining web applications for threats including DDoS attacks, SQL injection, cross-site scripting (XSS), authentication weaknesses, malware, and ransomware.
• Cybersecurity Strategy Full-scale cybersecurity strategy and 5-year roadmap development service defining long-term cybersecurity objectives aligned with regulatory requirements and business goals.
• Cybersecurity Program Comprehensive cybersecurity program development defining required cybersecurity requirements and controls for robust governance including policies, standards, frameworks, and governance models.
• Cybersecurity Risk Assessment Service identifying and prioritizing cybersecurity risks providing essential insights and strategies to strengthen cybersecurity resilience. Includes comprehensive and on-demand formats.
• Cybersecurity Compliance Assessment Service assisting organizations in understanding current compliance levels with required cybersecurity standards including stakeholder requirements, international standards (ISO27001, NIST), and internal requirements.
• Cybersecurity Maturity Assessment Service evaluating organization's current maturity level against well-known international cybersecurity maturity frameworks to assess efficiency and effectiveness of implemented practices.
• Cybersecurity Awareness Service Service fostering security-first mindset through customized cybersecurity awareness programs to educate employees and build resilience against evolving threats.
• OT GRC OT-specific Governance, Risk, and Compliance service offering comprehensive oversight across OT infrastructure aligning with NCA OTCC, ISA/IEC62443, and NIST-SP 800 standards.
• OT Penetration Testing Penetration testing and vulnerability assessment service for industrial control systems (ICS) and OT environments identifying vulnerabilities in SCADA systems, cloud infrastructure, web applications, APIs, and IoT devices.
• OT Digital Forensics & Incident Response (DFIR) Service providing 24/7 OT-focused DFIR including around-the-clock recovery support, reverse engineering, digital forensics analysis, and incident response management framework development.
• Automated OT Asset Discovery Solutions Service providing full visibility over all Operational Technology assets to optimize resource allocation, reduce risks, and make informed decisions related to OT potential risk.
• OT Cybersecurity Architectural Assessment Service assessing OT networks and systems architecture against defense-in-depth strategies, analyzing technical and non-technical controls to identify improvement areas.
• OT Maturity Risk Assessment C2M2 (Cybersecurity Capability Maturity Model) based maturity assessment service for OT systems in critical infrastructure.
• OT Cybersecurity Program Service developing cybersecurity programs for OT environments by aligning with NCA standards and NIST Cybersecurity Framework for scalable cybersecurity foundation.
• OT Cybersecurity Projects Service incorporating cybersecurity aspects in OT systems projects from early phases to protect critical facilities against cyber breaches.
• Tabletop Exercise Incident response training service simulating real-world cyberattacks including ransomware, advanced evasive attacks, network compromise, social engineering, malware, and DDoS scenarios.
• Integration Services (VAR) Value-added reseller service offering cybersecurity solutions covering Cloud Security, Network Security, Endpoint Security, Data Security, Zero-Trust Security, and SIEM categories through partnerships with leading technology vendors.
• Cybersecurity Monitoring Services 24/7 monitoring service using SIEM platform for continuous network traffic and endpoint monitoring to identify and alert on potential threats and anomalies.

Quantifiable outcome

• 100% detection rate in seven key tactics within MITRE ATT&CK evaluations
• +2 more outcomes

Named customers2 records

Segments5 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability7 records

Feature6 records

Partnerships

Ten partnerships are on record, tiered core, supporting and flagship.

• CTM360coreTechnology or Integration · 1 January 2025Strategic partnership integrating CTM360's digital risk protection, brand protection, and external attack surface management capabilities into Cyberani's 24/7 managed security services. Enables customers across Saudi Arabia to receive continuous visibility into external risks including brand misuse, phishing campaigns, and supply chain exposure, with end-to-end takedown workflows for malicious online content. Announced during Black Hat Middle East and Africa 2025.
• Palo Alto NetworkscoreTechnology or IntegrationIT technology partner providing next-generation firewall and security platform solutions integrated into Cyberani's managed security services portfolio.
• CiscocoreTechnology or IntegrationIT technology partner providing network security and infrastructure solutions integrated into Cyberani's cybersecurity service offerings.
• MandiantcoreTechnology or IntegrationIT technology partner providing threat intelligence and incident response expertise integrated into Cyberani's managed security services.
• CrowdStrikecoreTechnology or IntegrationIT technology partner providing endpoint protection and threat intelligence platform integrated into Cyberani's security operations.
• RSAsupportingTechnology or IntegrationIT technology partner providing SIEM and security analytics solutions for Cyberani's SOC operations.
• FortinetsupportingTechnology or IntegrationIT technology partner providing network security solutions integrated into Cyberani's service portfolio.
• Group-IBsupportingTechnology or IntegrationIT technology partner providing threat intelligence and fraud detection solutions.
• DarktracesupportingTechnology or IntegrationIT technology partner providing AI-powered cybersecurity solutions integrated into Cyberani's offerings.
• Aramco DigitalflagshipStrategic or Co-development PartnerParent company and strategic partner. Cyberani is the managed security service division of Aramco Digital, contributing to Saudi Arabia's national security and digital defense objectives. Provides access to enterprise and industrial client base in Saudi Arabia.

Scale indicators5 records

Recent moves6 records

Expansion highlights2 records

Broad incumbents

• Secureworks: Global MSSP offering managed detection and response, vulnerability management, and incident response across enterprise customers. Comparable MDR/SOC peer with broader international reach.
• Mandiant (Google Cloud): Global incident response, threat intelligence, and managed detection provider, now part of Google Cloud. Comparable on DFIR retainer and managed defense offerings, with much larger global footprint.
• CrowdStrike: Global endpoint and MDR provider with Falcon Complete managed detection and response service. Comparable as a managed security offering, with broader global scale and brand recognition.
• Palo Alto Networks (Unit 42): Global cybersecurity platform vendor whose Unit 42 division delivers MDR, incident response, and threat intelligence. Comparable as a partner and competitor in managed security and ZTNA/CyLnx's adjacent space.

Direct peers

• Spire Solutions: MENA value-added cybersecurity distributor and services provider with deep SOC, GRC, and offensive security practices. Comparable as a regional MSSP/systems integrator serving enterprise and government clients in KSA and the GCC.
• Claroty: OT/ICS cybersecurity vendor offering visibility, vulnerability management, and network protection for industrial environments. Comparable as a specialist in the OT cybersecurity category Cyberani serves.
• Injazat: UAE-based managed security, cloud, and digital infrastructure provider serving government and large enterprises. Comparable MSSP with national-scale ambitions across the Gulf.
• Arctic Wolf: Global MDR specialist delivering 24/7 SOC-as-a-service with a subscription model to mid-market and enterprise customers. Comparable in core managed detection and response delivery model.
• Nozomi Networks: OT and IoT cybersecurity vendor specializing in ICS/SCADA visibility, threat detection, and asset intelligence. Comparable OT-focused peer competing for similar industrial clients in the region.
• Help AG: Middle East-focused MSSP and cybersecurity integrator headquartered in the UAE, offering managed SOC, GRC, pen testing, and incident response services across the GCC. Closest regional analogue to Cyberani's MSSP/SOC/GRC stack.

Market position

Strengths5 records

Weaknesses4 records

Competitive moat6 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/cyberani_sa
• YouTubeyoutube.com/@Cyberani_sa
• LinkedInlinkedin.com/company/cyberani-solutions

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles12 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cyberani Solutions