Division A
Cyber & AI Security
Fourteen domains and 86 core services, amplified by AI and run around the clock.
Division A · Cyber & AI Security
One portfolio, one owner for every service
Advise, implement, operate and assure: sold as a single service, an integrated programme or a managed subscription. Four business groups, organised into 14 domains.
Tip: Choose a group below to see its services. Unknown words such as SOC or PAM are explained in the glossary.
- 14 service domains
- 86 core services
- 10 managed offerings
- 12 product categories
Group A · 25 services. Strategy, governance & assurance: the front door. What to protect, and proof it works.
In simple words: We help you decide what to protect, write the rules, test your defences like a real attacker would, and get you ready to recover if something goes wrong.
- D01
Strategy & advisory
- Strategy & roadmap
- Programme & org design
- Virtual CISO
- Architecture & Zero Trust
- Project security advisory
- Cyber due diligence & M&A
- D02
Governance, risk & compliance
- ISMS & ISO 27001 readiness
- Cyber risk management
- Regulatory compliance
- Policies & procedures
- Security audit
- Third-party risk
- GRC automation
- D03
Offensive security & assessment
- Vulnerability assessment
- Penetration testing
- Red & purple teaming
- Social engineering
- Configuration review
- Continuous validation (CTEM)
- Bug bounty & VDP
- D04
Resilience, BCM & DR
- BCMS (ISO 22301)
- IT disaster recovery
- Cyber recovery & ransomware
- Crisis management & exercises
- Operational resilience
Group B · 37 services. Technology protection. Each domain owns design, implementation and optimisation; ongoing operation runs through MSS and licences through TPS.
In simple words: We protect each part of your technology: your network, your apps, your data, your cloud, who can log in, and the machines in factories and plants.
- D05
Network & infrastructure
- Segmentation
- NGFW
- SASE / SSE
- endpoint & server
- NAC & NDR
- DDoS & DNS
- hardening
- D06
Application security
- Secure SDLC & DevSecOps
- code testing
- threat modelling
- software supply chain
- WAAP
- D07
Data & privacy
- Classification & DSPM
- DLP & insider risk
- encryption, KMS & PKI
- database security
- privacy
- rights management
- D08
Cloud security
- Strategy & landing zones
- posture assessment
- CNAPP
- SaaS security
- migration security
- D09
Identity (IAM)
- IAM strategy
- SSO & MFA
- IGA
- PAM
- CIAM
- ITDR & AD security
- non-human identities
- D10
OT, ICS & IoT
- Safe OT assessment
- Purdue segmentation
- OT detection
- IEC 62443 programme
- IoT & medical devices
- OT endpoints
Group C · 16 services. Operations, intelligence & investigations: daily defence.
In simple words: Our control room watches for attacks all day and night. We learn what attackers are planning, investigate what happened after an attack, and train people through our Academy.
- D11
Security operations & response
- SOC design & build
- SIEM, SOAR & XDR engineering
- threat hunting
- incident response
- compromise assessment
- D12
Threat intelligence & digital risk
- GCC threat intelligence
- CTI programme & TIP
- digital risk protection
- attack-surface management
- security ratings
- D13
Forensics, investigations & academy
- Digital forensics
- investigations & litigation
- forensic labs
- awareness & training delivered through the Academy
Group D · 8 services. AI security & governance: securing AI itself.
In simple words: When your organization uses AI, the AI itself can be attacked or misused. We set the rules for using AI safely, test it, protect it, and watch over it.
- D14
AI security & governance
- AI governance & ISO 42001
- AI assessment & secure RAG
- AI red teaming & prompt injection
- AI agent & MCP security
- AI firewall, guardrails & gateway
- Model & AI supply-chain protection
- AI data protection & privacy
- AI security monitoring & response
AI-powered defence
Cyber defence, amplified by AI
In simple words: Our experts work together with AI. The AI spots unusual behaviour, sorts alerts quickly and predicts attacks, so our team can act faster.
- Managed SOC, 24/7
- Threat intel & incident response
- Vulnerability & pen-testing (VAPT)
- Network & endpoint: EDR, XDR, NDR
- Data loss prevention & encryption
- Cloud security architecture
- Threat hunting & MDR
- SOAR & response automation
- Identity governance: IAM, PAM, SSO
AI/ML security engine
- AI-driven detection & response
- ML-automated SOC triage
- Predictive threat intelligence
- User & entity behaviour analytics (UEBA)
- AI-prioritised vulnerability management
- Adaptive access & authentication
MSS · Managed security services
Ten subscriptions that run your security 24/7
In simple words: Instead of building your own security team, you can subscribe to ours. We run the service for you every day, and you pay monthly or yearly.
- MSS.01Managed SOC / SOC-as-a-Service
- MSS.02Managed detection & response
- MSS.03Vulnerability & exposure management
- MSS.04Security infrastructure operations
- MSS.05Identity services: IGA & PAM
- MSS.06GRC, compliance, vCISO & DPO
- MSS.07Threat intel & digital risk protection
- MSS.08OT security monitoring
- MSS.09Managed AI security
- MSS.10Cyber recovery, backup & DRaaS
Delivery models
Shared cloud · dedicated on-site · hybrid · build-operate-transfer for data-sovereign clients.
Support with every engagement
L1–L3 product support · health checks · resident engineers · incident response retainer.
TPS · Technology solutions & partnerships
No product sold without the service behind it
In simple words: When we supply a security product, our own experts always set it up and support it. You never get a box without help.
- 01 SecOps platforms
- 02 Endpoint protection
- 03 Network security
- 04 Application security
- 05 Identity & access
- 06 Data protection
- 07 Cloud security (CNAPP)
- 08 OT, ICS & IoT security
- 09 Exposure management
- 10 Threat intel & digital risk
- 11 AI security
- 12 GRC, resilience & human risk
Solution bundles
Six cross-domain bundles for common needs
In simple words: These are ready-made packages that combine several services to solve one common problem.
- National Compliance AcceleratorFor regulated entities
- Ransomware ReadinessFor all sectors
- Secure Cloud JourneyFor cloud migrations
- Secure AI AdoptionFor AI app launches
- OT ResilienceFor energy, oil & gas, utilities
- SOC ModernisationFor organisations with a legacy SOC, or none
Regulatory alignment · Qatar & GCC
Aligned with Qatar’s national cyber and AI rules
In simple words: Qatar has official laws and rules about cyber security, personal data and AI. This table shows each rule and which of our services helps you follow it.
National Cyber Security Strategy 2024–30
Five pillars, led by critical-infrastructure resilience
- D01
- D04
- D10
NIA Policy / Standard v2.1 (NISCF)
National controls and NIA certification
- D02
National Data Classification Policy
Data classification aligned with NIA
- D07.01
PDPPL (Law No. 13 of 2016)
Personal data protection; breaches reported to NCSA
- D07.05
- D11.04
NCSA AI adoption guidelines (2024)
AI governance, model security, data, testing
- D14
QCB ethical-AI guidance (finance)
Transparency, consent, purpose limits
- D14.01
- D14.07
IEC 62443 (international, energy sector)
Industrial control-system security
- D10
Regional reach: KSA (NCA, SAMA, PDPL) · UAE (TDRA, Dubai ISR) · Kuwait, Bahrain, Oman · Jordan, Egypt.
Sources: QNA; NCSA; Chambers Data Protection 2026 – Qatar.
Sectors served
Twelve sectors, from ministries to markets
- Government & defence
- Telecoms
- Banking & financial services
- Industry & manufacturing
- Oil, gas & energy
- Healthcare & pharma
- Technology & cloud
- Enterprise & business
- Transport & aviation
- Education & research
- Utilities & critical infrastructure
- AI & emerging tech