Trusted Partners

What Trusted Partners does

Trusted Partners is a Riyadh-based cybersecurity, governance, risk, and compliance (GRC) consulting firm founded in 2016 to support Saudi Arabia's Vision 2030 digital transformation agenda. The company serves Saudi government entities, financial institutions, defense organizations, and large enterprises with a portfolio of professional services organized into five core areas: Cybersecurity and Technology Assurance (including a 24/7 Managed Security Operations Center leveraging SIEM and SOAR, vulnerability assessment and penetration testing, OT security, configuration review, and source code review); Business Resilience and Continuity (BCMS aligned to ISO 22301, emergency and crisis management, IT disaster recovery); Governance, Risk, and Compliance (enterprise GRC, enterprise risk management, and cybersecurity GRC frameworks aligned to NCA, SAMA, ISO 27001 and NIST); Audit and Compliance (NCA, DGA, SAMA, Aramco CCC/CCC+, and ISO preparation audits); and Awareness and Training Programs.

The firm operates as a professional services consultancy with a project-based, multi-year engagement model and quote-based pricing. It sells primarily through direct enterprise field engagement, leveraging approved-vendor status with Saudi regulators and major corporations (NCA, SAMA, CITC, DGA, Saudi Aramco). It holds MOMRAH Class 1 IT Contractor certification qualifying it for projects exceeding SAR 1 billion, plus ISO 20000-1, ISO 22301, ISO 27001, and ISO 31000 certifications, and authorization to issue Aramco CCC/CCC+ third-party certifications. Revenue is generated through consulting fees tied to engagement scope, duration, and complexity, supplemented by training programs and certification services.

Name

Trusted Partners

Legal name

Trusted Partners

Website

https://trusted.sa

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

11–50 employees

Short description

Trusted Partners is a Riyadh-based cybersecurity and GRC consulting firm founded in 2016, serving Saudi government entities, financial institutions, and large enterprises with advisory, audit, managed SOC, business continuity, and training services aligned to NCA, SAMA, CITC and Aramco standards.

Ownership category

akta.pro rank

Headquarters

HQ city

Riyadh

HQ country

Saudi Arabia

HQ region

Middle East

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Professional Consulting Services: Advisory and consulting services for GRC, cybersecurity, business continuity and audit compliance. Revenue is generated through project-based engagements with government entities and enterprises, with fees based on scope, duration and complexity of deliverables.
2. Training and Awareness Programs: Cybersecurity training programs including workshops, simulations, e-learning modules and ISO preparation courses. Delivered as standalone engagements or bundled with consulting services.
3. Third-Party Certification Services: Evaluation and certification services for external parties (vendors/contractors) supporting major organizations like Saudi Aramco, SAMA and CITC. Includes CCC and CCC+ certification issuance.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

Trusted Partners is a Saudi-based professional services firm delivering cybersecurity, governance/risk/compliance (GRC), business continuity, audit, and training services to government entities and large enterprises. The firm is approved by Saudi regulators (NCA, SAMA, CITC) and Saudi Aramco to issue third-party certifications (CCC/CCC+) and operates a Managed Security Operations Center (MSOC) for 24/7 security monitoring.

Product overview

Trusted Partners offers a portfolio of cybersecurity and governance consulting services organized into five core areas: Cybersecurity and Technology Assurance (covering MSOC, VAPT, OT security, configuration review, and source code review); Business Resilience & Continuity (BCMS, emergency management, crisis management, and IT disaster recovery); Governance, Risk, and Compliance (enterprise GRC, ERM, and cybersecurity GRC); Audit & Compliance (NCA, DGA, SAMA, and Aramco certifications, plus ISO preparation); and Awareness & Training Programs. These services are delivered as consulting engagements rather than a unified software platform.

Differentiator

Problem solved

Functional benefit

Products and services

• Cybersecurity and Technology Assurance Professional assessments that help organizations identify, assess, and mitigate cybersecurity risks in their technology systems. Includes MSOC services, OT security assessments, VAPT, configuration reviews, and source code reviews; designed for Saudi government entities and regulated enterprises.
• Business Resilience and Continuity Services to prepare organizations to handle unexpected disruptions such as cyberattacks, power outages or natural disasters. Includes Business Continuity Management System (BCMS), emergency management, crisis management and IT disaster recovery consulting; targeted at government agencies and enterprises that must meet continuity obligations.
• Governance, Risk, and Compliance (GRC) Comprehensive GRC solutions combining best practices with leading GRC software to provide a holistic view of organizational risk posture and regulatory landscape. Includes Enterprise Governance and Compliance, Enterprise Risk Management, and Cybersecurity GRC; aligned with NCA, SAMA, ISO 27001 and NIST for Saudi organizations.
• Audit and Compliance Services Expert audit and compliance services including NCA compliance, DGA compliance, SAMA compliance, Aramco CCC/CCC+ certification, IT audits against international standards, cybersecurity audits, and ISO preparation; delivered as approved third-party assessor engagements.
• Awareness and Training Programs Cybersecurity awareness and training programs that address knowledge gaps within organizations. Includes cybersecurity trainings, BCMS training, ISO 22301 training, ISO 27001 training, ISO 31000 training, and ongoing awareness programs; delivered as standalone workshops, simulations, e-learning modules and ISO preparation courses.
• Managed Security Operations Center (MSOC) 24/7 continuous monitoring and analysis of an organization's security posture by security professionals. Includes log collection, event correlation, threat detection, incident response and security reporting; a standalone cybersecurity service for clients who need ongoing security operations.
• Vulnerability Assessment and Penetration Testing (VAPT) Combined vulnerability assessment and penetration testing service to comprehensively assess the security posture of systems, applications and network infrastructure; delivered as a standalone security testing engagement for organizations that require third-party security validation.
• Business Continuity Management System (BCMS) Comprehensive framework for managing all aspects of business continuity including planning, preparation, response, recovery and testing activities; aligned with ISO 22301 and delivered as a standalone consulting engagement for organizations that need certified business continuity capabilities.
• Resident Engineer (RE) Service On-site resident consultants serving as technical representatives for clients, providing periodic reports to ensure project objectives are met according to schedules and standards; delivered as a dedicated staffing/managed service supporting client cybersecurity and compliance operations.

Quantifiable outcome

• 100% project success rate achieved
• +2 more outcomes

Named customers8 records

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

Four partnerships are on record, tiered core and important.

• Prince Sultan UniversitycoreStrategic or Co-development Partner · 14 February 2023MOU for cooperative training providing training opportunities with employment possibilities for university students, transferring experiences and developing capabilities in technology and cybersecurity, empowering young talents to enter the job market.
• Nozomi NetworkscoreTechnology or Integration · 17 November 2022Partnership agreement signed during Black Hat 22 event to expand and develop cybersecurity services and solutions, investing in the cybersecurity sector and contributing to industry development.
• Fintech Saudi ArabiaimportantStrategic or Co-development PartnerAgreement emphasizing technology role in financial sector. Aims to support development of fintech sector, contribute to security and protection of fintech companies, assist in entrepreneurship growth, elevate cybersecurity maturity in SMEs aligned with Vision 2030, and empower small and medium enterprises.
• Saudi Central Bank (SAMA)coreStrategic or Co-development PartnerCollaborated on pioneer programs 17 SECURE and 18 SECURE to develop national skills and provide trainees with world-class certifications in cybersecurity.

Scale indicators7 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• help AG: Middle East-focused cybersecurity consultancy and managed services provider operating across the GCC. Comparable offering of consulting, compliance, and managed security services to enterprise and government buyers in the region.
• Saudi Cyber Security Company (SCCCYBER): Saudi national cybersecurity firm providing managed SOC, consulting, and compliance services. Competes head-to-head with Trusted Partners for Saudi public-sector cybersecurity and compliance engagements.
• Sirar by stc: Cybersecurity subsidiary of Saudi Telecom Company (stc) offering managed SOC, GRC, and cyber advisory to Saudi enterprises and government. Closest direct Saudi-headquartered peer competing for the same NCA/SAMA-aligned mandates.
• Virtua (formerly AKCy): Saudi cybersecurity and managed services firm offering SOC, GRC, and advisory services. Directly comparable in scope, customer base, and Saudi public-sector focus.

Emerging players

• Thiqah Business Services: Saudi cybersecurity and digital services firm providing GRC, managed SOC, and compliance consulting. Competes for similar Saudi enterprise and government cybersecurity mandates.

Broad incumbents

• Mandiant (Google Cloud): Global incident response, threat intelligence, and cybersecurity consulting firm now part of Google Cloud. Comparable in delivering high-end cyber advisory, threat intelligence, and compliance work to large enterprises and governments, including in MENA.

Regional players

• NourNet: Saudi-based managed services and cybersecurity provider serving enterprise and government clients. Overlaps with Trusted Partners on managed security, compliance, and IT services in KSA.
• CyberKnight Technologies: UAE-based cybersecurity value-added distributor and services firm covering the Middle East. Overlaps with Trusted Partners on enterprise cybersecurity advisory and managed services in adjacent GCC geographies.
• MDS for Computer Systems: Saudi-headquartered IT and cybersecurity solutions provider serving enterprise and government. Comparable in delivering compliance, infrastructure security, and managed services within Saudi Arabia.
• Spire Solutions: Middle East cybersecurity solutions and services provider headquartered in Dubai. Comparable in delivering consulting, compliance, and managed security to enterprise and government across MENA.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xtwitter.com/TrustdPartnrs
• LinkedInlinkedin.com/company/trstd-prtnrs

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Trusted Partners