Which cyber security services do you offer in Riyadh?
Key takeaways
- All work in Riyadh is delivered remotely unless a physical site survey is genuinely needed.
- Engagements are fixed-scope with a price band and a delivery date agreed in writing.
- Every assessment ends with a retest confirming which findings were closed.
- Every engagement is covered by a signed NDA and a rules-of-engagement document.
As of 3 November 2026: the service descriptions, prices and turnaround figures on this page are current.
What does the security environment in Riyadh look like?
Riyadh sits inside the Saudi Arabia regulatory perimeter, and The National Cybersecurity Authority (NCA) publishes the Essential Cybersecurity Controls (ECC), and SDAIA runs the personal data side of the framework.
The SDAIA Personal Data Protection Law governs personal data, and the NCA Essential Cybersecurity Controls (ECC-2:2024) set the baseline control set that critical national infrastructure has to meet.
Those instruments set the baseline a client has to meet. Our job is to test against that baseline and against the framework the client has chosen, and to report what we find in terms the client can act on.
Which services are available in Riyadh?
- VAPT & Penetration Testing
- Hire an Ethical Hacker
- AI-Driven Ethical Hacking
- Web Application Security
- Mobile App Security Testing
- API Security Testing
- Network Penetration Testing
- Cloud Security Assessment
- Incident Response & Retainer
- Ransomware Recovery & File Unlock
- Website Malware Removal
- Deepfake & AI Abuse Protection
- Digital Forensics & Evidence
- Account Recovery & Data Recovery
Which other locations in Saudi Arabia do you cover?
How does an engagement run in Riyadh?
Scoping, authorisation, testing, reporting, remediation and a retest. The first two happen in writing before anything is touched, and the retest at the end confirms which findings were closed rather than assuming they were. You get the same six stages whether the engagement is in Riyadh or anywhere else, and you get a live finding log while the work is in flight.
What does a security engagement cost in Riyadh?
Engagements are quoted in Indian Rupees and can be settled in SAR or USD; the currency and any applicable withholding are confirmed in the written quote. The bands below are the indicative ranges for a typical scope of each type; the final figure depends on the number of assets, the depth of authentication, the number of environments, and whether remediation support is included.
| Engagement | Indicative range | Typical timeline |
|---|---|---|
| Static website penetration test | Rs 40,000 - 90,000 | 3-5 working days |
| Web application penetration test | Rs 1,20,000 - 3,50,000 | 7-12 working days |
| Mobile app security test (per platform) | Rs 1,00,000 - 3,00,000 | 7-10 working days |
| API penetration test (50-150 endpoints) | Rs 1,00,000 - 4,00,000 | 8-15 working days |
| External network penetration test | Rs 60,000 - 2,00,000 | 5-8 working days |
| Internal network and Active Directory test | Rs 1,50,000 - 6,00,000 | 10-20 working days |
| Cloud configuration security review | Rs 1,00,000 - 3,50,000 | 5-10 working days |
Which regulations apply to a business in Riyadh?
The SDAIA Personal Data Protection Law governs personal data, and the NCA Essential Cybersecurity Controls (ECC-2:2024) set the baseline control set that critical national infrastructure has to meet.
This is general guidance about which instruments are in force, not advice about how your organisation should comply with them. We confirm the instruments that bind your entity in the written scope, and we recommend you take your own legal advice on the obligations that follow.
What are the common questions about cyber security in Riyadh?
Get a quote for work in Riyadh
Tell us what you need tested and we will come back with a written scope, a fixed price band and a delivery date.
Request a quote See pricingLast reviewed: 3 November 2026. Information on this page is general guidance, not legal advice. Prices are indicative bands for a typical scope and are confirmed in a written quote before any work begins.