Security Edge

Governance, risk and compliance for organizations in Saudi Arabia.

Organize controls and evidence, and follow risks and treatment plans from one platform, to support audit readiness against NCA ECC, SAMA CSF and ISO 27001. Data is hosted in Saudi Arabia.

Hosted in Saudi ArabiaArabic and English
Security Edge dashboard on an iPad
Supported frameworks and standardsNCA ECCSAMA CSFISO 27001NIST CSFNCA CCCUsed in production by Ejar Link
Compliance

Every framework, every control, and its evidence in one center.

Run assessment cycles on NCA ECC, SAMA CSF and ISO 27001, move each control from Not Implemented to Compliant, and keep evidence current. Audit readiness updates with every control you close.

  • Frameworks pre-mapped with a control count per framework
  • Weighted compliance score, audit readiness and next deadline at a glance
  • Control status across all frameworks in one chart
Explore the GRC platform →
Compliance posture
Weighted by control count
Compliance posture
74%
Audit readiness
Good
Next cycle
48 days
NCA ECC114 controls
SAMA CSF96 controls
ISO 2700193 controls
CompliantPartialIn progressGap
Risk management

Where the risk stands, and what needs a decision today.

The risk centre shows exposure after controls against inherent exposure, critical and overdue risks, and the register by level, treatment strategy and lifecycle phase.

  • Residual versus inherent exposure with the percentage removed
  • A needs-action list with overdue tasks and their owners
  • Heat map, timeline and register views of the same risks
See risk assessment →
Risk heat map
Likelihood × impact
Inherent
11.6
Residual
9.3
16 risks on the register · 5 overdue
Treatment strategy
Mitigate 13Accept 2Transfer 1
Vulnerability tracking

Track every finding against the remediation window its severity allows.

Import results from Tenable Nessus, Cortex XDR and other scanners, or report findings by hand. Each severity has a remediation window, and overdue and due-soon findings are shown by host and by scanner.

  • Remediation windows per severity with the on-time rate
  • Scanner integrations and the share of findings that arrive automatically
  • This module is currently in beta
See vulnerability management →
Remediation windows
By severity
Critical3d window
High7d window
Medium30d window
Low90d window
On timeDue soonOverdue
Connected scanner83%
Manual entry17%
Asset inventory

The assets and software your controls protect, in one register.

An IT asset register with criticality, isolation, owner and agent status, linked to vulnerabilities and risks. Import from CSV and export to Excel for the audit.

  • Asset type distribution and software version health
  • Counters for critical, end-of-life and unowned assets
  • Search by hostname, IP address or asset ID
Explore the platform →
Asset inventory
By type
Total
128
Critical
9
End of life
4
No owner
6
128
Servers40%
Cloud25%
Network20%
Endpoints15%
Database serverCritical
VPN gatewayEnd of life
FirewallOK

Specialist services that support your readiness.

Consulting, assessments and security testing that help your team find gaps and prioritize remediation, delivered by our Riyadh team.

See the platform against your own requirements.

Request a 30-minute demo to explore the functions that fit your team, or contact us for a quotation.

Request a demoRequest a quotation