Passive before active
We default to observation. Nothing is injected into a live control network without a written change request, a rollback plan and your sign-off. Availability and safety come ahead of the assessment schedule.
About
A small team, deliberately.
OT Masters was built around one idea: security is an engineering problem before it is a procurement problem. That holds on a plant floor, in a bank's data centre and at the internet edge alike. We stay small enough that the people who scope your work are the people who do it.
Our mission
Find the weak points, then hand over a route out.
We help organisations understand their digital and physical assets, see where their defences fall short, and follow a clear, prioritised path to a stronger position. An assessment that ends in a PDF nobody can act on has failed, whatever it cost.
That means every finding we raise carries three things: what the exposure actually is in operational terms, what it would take to fix, and what happens if it is left alone.
Track record
Fifty-plus projects. All of them finished.
We are proud of that number, and more proud of the second one. A project only counts when the client signs it off.
50+
Projects delivered
Operators, integrators and vendors across the Middle East, Turkey and Africa.
100%
Delivered to sign-off
Every engagement has reached client acceptance. Scope agreed in writing before work starts is most of the reason.
20+
Estates turned around
Deployments that had been stalled for years, closed out alongside the vendor's own teams and handed back working.
The turnaround work is the part we are quietly proudest of. Accounts that had been carrying unresolved issues for a long time, and had been written off internally as difficult, ended the engagement as references. The details belong to those clients, so they stay with them.
How we work
Five commitments
Evidence, not opinion
Findings are backed by captures, configurations and logs you can inspect yourself. If we cannot evidence it, we flag it as an assumption rather than a conclusion.
Vendor-honest
We deliver a small set of platforms we believe in. If the right answer for you is a product we do not carry - or no product at all - that is what the report will say.
We work with the channel
A large share of our work arrives through resellers, distributors and vendors. We do not sell against them, do not approach their accounts and do not appear at renewal with a competing proposal. Partner terms →
Handover by default
Runbooks, source code and documentation are delivered with the work. The goal is a team that can run the environment without us, and an optional support contract because you want one, not because you are stuck.
Where we are
Abu Dhabi, working across META
One base, one team, and engineers who travel. Everything from contracting to delivery runs out of Abu Dhabi, serving the Middle East, Turkey and Africa.
Headquarters
Abu Dhabi, United Arab Emirates
OTMASTERS TECHNOLOGY SERVICES L.L.C – S.P.C. Contracting, regional accounts, vendor relationships and client commercial management.
VAT 105122495200001
Licence CN-5874356
Delivery
Onsite across the region
Assessment and deployment teams, the R&D group behind our protocol analysis work, and the technical support desk. Engineers travel to site rather than working the whole engagement from a desk.
GCC · Levant · Turkey · Africa
Field delivery across the UAE, Saudi Arabia, Jordan, Turkey and the wider Middle East and Africa, with remote engagements worldwide where the work allows it.
Beyond services
We build as well as consult
R&D
An in-house research group working on industrial protocol decoding and deep packet inspection. It is why we can answer questions about traffic that commercial tools report as unknown - and why our integration work tends to land where others stall.
Training
As an OTSEC.io partner we deliver structured OT security training, from fundamentals through to advanced protocol analysis and incident response.
See trainingWant to talk to an engineer, not a salesperson?
That is the only kind of first call we do.