Services
Defined scope. Defined deliverables. Fixed price.
Every service below is quoted with a written scope, a deliverable list and a delivery window. If something falls outside it we say so before the work starts, not in the invoice. It is why fifty-plus projects across OT, IT and enterprise environments have all reached sign-off.
Flagship service
Annual Support Contracts
The service most of our clients renew, and the reason deployments we finish are still working two years later.
A platform goes stale faster than anyone expects. Assets change, policies drift, the version falls out of support and the person who was trained has moved on. An annual contract puts a named engineer who already knows your environment behind the phone, and puts a scheduled visit in the calendar rather than leaving it to good intentions.
Included
- Scheduled onsite visits - up to twelve per year
- Remote response within an agreed service level
- Version currency: upgrade planning and execution
- Policy, classification and detection tuning as the estate changes
- Quarterly posture review with written recommendations
- Direct escalation path to the engineers who built your deployment
Commercial terms
Scoped per platform and per site, quoted in USD or AED, billed annually in advance and exclusive of applicable taxes. Partners can white-label the contract and have us staff it. See partner terms →
Service 02
Security Gap Analysis
A formal measurement of the distance between where your OT security posture is today and where it needs to be, with a roadmap for closing it.
Run against an OT estate, an IT estate, or both together. Gap analysis is not a vulnerability scan. We assess architecture, segmentation, remote access, asset management, monitoring, patch and change practice, backup and recovery, and the human processes around them. Findings are weighted by operational impact, so you are not asked to shut a line down for a low-value fix.
What you receive
- Current-state architecture and asset inventory
- Findings register mapped to your chosen framework
- Risk rating with operational and safety context
- Prioritised remediation roadmap, phased and costed
- Executive summary suitable for a board or a regulator
Typical duration
2 to 6 weeks depending on site count and asset population.
Service 03
Forescout Professional Services
Design, deployment, upgrade and tuning - including the OT segments most integrators will not touch.
Our longest-running practice, delivered across telecommunications, government and industrial clients in the region. A good share of that work has been finishing estates that were deployed years earlier and never completed: classification rebuilt, policy moved out of monitor mode, versions brought current, OT segments finally onboarded. Work is executed under change control with rollback planned before anything is applied to a production appliance.
Engagement types
- Greenfield design and deployment, including appliance sizing
- Version upgrades and migration from end-of-support releases
- Health check and policy review of an existing estate
- Classification tuning so OT assets stop being reported as unknown
- Rescue of stalled or abandoned deployments
- Connect App and custom module development
- Knowledge transfer and administrator enablement
Service 04
Compliance & Audit Readiness
Getting to a defensible position against the framework you are actually measured on, and being able to prove it on the day.
For Saudi operators that means OTCC-1:2022 and ECC from the National Cybersecurity Authority. Elsewhere it is usually IEC 62443, NIST CSF, ISO 27001 or a sector regulator's own controls. The underlying work is the same: establish what the control requires, establish what you can evidence today, and close the difference.
Frameworks we work against
What you receive
- Control-by-control applicability and maturity assessment
- Evidence pack, indexed to each control
- Remediation plan with owners and target dates
- Policy and procedure drafting where documents are missing
- Pre-audit walkthrough with your team
Service 05
IT & Enterprise Security Delivery
The corporate estate, not just the plant floor. Most of our clients engage us here first and the OT work follows.
Banks, government bodies, telecom operators, universities and media groups run the same core problems: who is on the network, what are they reaching, and can any of it be proven to an auditor. We design, deploy and tune the platforms that answer those questions, and we do it under change control in production estates.
What this covers
- Network access control and device visibility across campus and data centre
- Network detection and response, sensor placement and decryption strategy
- Zero-trust and secure remote access in place of legacy VPN
- Edge protection - WAF, API security, DDoS and DNS-layer controls
- Host-based microsegmentation across the enterprise estate
- Identity-aware policy and enforcement rollout, staged to avoid lockouts
Typical engagement
Greenfield deployment, rescue of a stalled rollout, or a health check and tuning pass on an estate you already own. See the platforms →
Service 06
PoC & Pre-Sales Support
For partners and vendors who need an engineer on the ground in the region without carrying the headcount.
We run proofs of concept end to end and sit in on technical sales conversations as your team. We do not sell licences, we do not approach your accounts, and the customer never hears our name unless you want them to.
What this covers
- PoC design with success criteria agreed before kickoff
- Sensor placement, capture and evaluation during the PoC window
- Written PoC result a technical buyer can act on, win or lose
- Architecture, sizing and objection handling on your sales calls
- Technical sections of RFP and tender responses
- Subcontracted delivery under your contract, white-labelled
Terms
NDA and non-circumvention signed before we see an account name. Full partner terms →
Service 07
Protocol Analysis & Advanced Forensics
When the logs do not explain it, we read the packets. Our R&D team specialises in industrial and medical protocol analysis.
We work across OT, IoT, IoMT and IT traffic, including proprietary and poorly documented protocols where commercial tools return "unknown". Typical reasons clients call us: an unexplained outage, a suspected intrusion, a vendor dispute, or a device behaving in a way nobody can account for.
Protocol families
What you receive
- Timeline reconstruction from captured traffic
- Technical findings with packet-level evidence
- Root-cause assessment and containment recommendations
- A report written to stand up in a dispute or an investigation
Service 08
Integration & Automation Development
Custom API and connector development so the tools you already own actually work together.
Security platforms rarely ship with the integration you need for your environment. We build it - connectors between security tools, feeds into CMDB and ticketing, enrichment pipelines, and automation that removes manual handoffs between teams.
Typical work
- Vendor connector and app development against published SDKs
- Asset and event synchronisation into CMDB, SIEM or ITSM
- Parsers for devices no product supports out of the box
- Workflow automation across OT, IoT and IT estates
- Source code and documentation handed over on completion
Delivery record
Why the fixed price holds
Across operators, integrators and vendors in the Middle East, Turkey and Africa.
Every engagement we have taken on has reached client acceptance. Scope is agreed in writing first, which is most of the reason.
Deployments that had been stalled or under-used for years, closed out and handed back to teams that now trust them.
Ready for a scope and a price?
Tell us the sites, the asset count and the deadline. We turn most proposals around in two working days.