Why is security priced differently from everything else?

Because it is bought differently. Twelve named components, each on its own billing unit — per user, per device, per privileged account, per framework — so you can take sign-in without taking data-loss prevention. It is also flat rather than volume-curved: three hundred users bill as three hundred.

Do we need all of it?

No, and most businesses should not start with all of it. Multi-factor sign-in and endpoint protection stop the overwhelming majority of real-world attacks. The rest exists for when a regulator, an insurer or a customer contract asks for it.

Can you help with a compliance audit?

Yes — that is what the compliance component is for, priced per framework. The practical value is that the evidence comes out of the day-to-day work rather than being assembled from scratch each time somebody asks.

Cybersecurity in Jeddah

Multi-factor sign-in, endpoint protection and the evidence trail auditors ask for — priced component by component, so you take what you need.

Price your estate Ask a question first

Cybersecurity — from

SAR 300/month, billed annually

Covers 20 staff on multi-factor sign-in and 20 devices on antivirus — a 20-person office in Jeddah. The per-device rate falls as the estate grows.

Essentials, our entry level. Pro and Ultra add faster response commitments, deeper administration and more hands-on work, and cost more.

On site: Same-day on-site when something needs a person
Response: Committed per level, stated on the plan — not negotiated later
Help desk: Arabic and English, around the clock

What cybersecurity covers

Cybersecurity is the one area we do not price per device, because nobody buys "security" as a lump. They buy multi-factor sign-in for their staff, antivirus on their laptops, encryption on the machines that leave the building, and — when a framework or a client demands it — the reporting that proves all three are working. So each component carries its own rate on its own billing unit: per user for sign-in, per device for protection, per framework for compliance. A zero is how you decline one.

That structure matters more than it sounds. It means a business can start with the two controls that stop most real attacks — multi-factor sign-in and endpoint protection — for a figure they can see before they call, and add privileged-account management, data-loss prevention or a compliance programme when something actually requires it. It also means the plan does not quietly become a bundle sized around somebody else’s risk profile.

In Jeddah: The security conversations we have in Jeddah are usually driven by a customer or an insurer rather than a regulator — a hospital group asked for evidence, a distributor was told to prove their endpoints are managed. That tends to mean starting with sign-in and endpoint protection and adding reporting once someone specific is asking for it.