Managed IT and cyber security for regulated firms in Riyadh and KAFD
Managed IT and cyber security for regulated firms in Riyadh and KAFD
As a cyber security company in Riyadh certified to ISO 27001:2022, we work with banks and financial firms, CMA-licensed asset managers and brokers, regional headquarters and critical-infrastructure organisations, from a first cyber health audit and penetration test to a 24/7 security operations centre.
A review of your current security posture that finds gaps and weak points before attackers do. We look at your devices, Microsoft 365, network and policies, then give you a prioritised plan to fix what matters most.
Insight into the threats that matter to your business, so you can act early, including monitoring for leaked staff credentials and your company’s data on the dark web.
Controlled, realistic attacks on your systems to prove where you are vulnerable. Each test ends with a report of what we found, how serious it is and how to fix it, with a tracked remediation plan.
Continuous protection delivered as a managed monthly service, in Bronze, Silver or Gold bundles that combine endpoint detection and response, anti-virus, phishing defence and monitoring.
Round-the-clock threat monitoring by a dedicated security operations centre. Every alert is investigated by human analysts supported by AI, who respond before an incident spreads.
Proactive measures that detect and respond to threats as they happen. Endpoint detection and response (EDR) on Windows, Mac and Linux devices and identity threat detection and response (ITDR) spot unusual behaviour and help contain it quickly, while Microsoft 365 security posture management continuously checks and locks down your Microsoft 365 settings.
Access security analysts when you need extra expertise, without a full-time hire. Useful for incident investigations, security reviews or extra help before an audit.
Practical awareness training that turns your people into your first line of defence. Bespoke sessions help staff recognise phishing, fake invoices and the other attacks most likely to reach them.
Guidance and preparation for the security standards your customers and regulators expect. We are certified to ISO 27001:2022 ourselves, and help organisations prepare for ISO 27001 and for NCA, SAMA and CMA reviews.
In Riyadh we manage the whole office of a CMA-licensed financial firm under an annual maintenance contract, including Microsoft 365 and office security. For an advisory and investment firm in Abu Dhabi, we run IT end to end with a full managed security stack and service desk. See our IT AMCs.
We map this work to the Saudi rules that apply to you. Read our guides to NCA ECC, the SAMA CSF, the CMA Cybersecurity Guidelines, the PDPL and reporting a cyber incident.
It finds and fixes weaknesses before attackers do, protects your devices, email and identities day to day, and helps you respond if something goes wrong. Cre8 IT covers all three: cyber health audits and penetration testing, managed protection, and a 24/7 security operations centre.
It depends on the scope: how many systems, applications and locations are tested, and whether the test is external, internal or both. We agree the scope with you first and then send you a quote.
A security operations centre (SOC) watches your systems around the clock for signs of an attack. With SOC as a Service you get that monitoring as a monthly service, with every alert investigated by analysts supported by AI, instead of building your own team. It is part of our Gold bundle.
It depends on your licence and activities: the SAMA Cyber Security Framework for financial institutions, the CMA Cybersecurity Guidelines for capital market firms, the NCA Essential Cybersecurity Controls for government and critical infrastructure, and the PDPL for anyone handling personal data. Our guides explain each one.
Bronze covers the essentials: endpoint detection and response, AI-powered anti-virus and phishing defence. Silver adds dark web and credential monitoring and bespoke awareness training. Gold adds SOC as a Service with 24/7 monitoring. We recommend a bundle after a short review.
Yes. Cre8 IT is certified to ISO 27001:2022 for information security and ISO 9001 for quality management, and is a Microsoft Partner.