Hisn · Pitch Deck
Banking & Fintech · SOVEREIGN SOC & ZERO TRUST
Hisnحصن
SAMA CSF maturity, zero-trust architecture, and a sovereign SOC that never sleeps.
neuriya.ai — Sovereign, Arabic-first enterprise AI
Problem
Banks report SAMA CSF maturity once a year, and defend it in real time every day
- SAMA Cybersecurity Framework maturity is typically tracked through an annual audit spreadsheet, leaving no live view of posture between assessments.
- Zero-trust rollouts stall because coverage isn't tracked branch by branch, so it's unclear which locations are still on legacy network trust.
- Suspicious sessions and accounts often wait for manual analyst review before containment, costing the minutes that matter most in an active intrusion.
- SAMA's regulatory notification deadlines and evidence packages are frequently tracked manually, creating real risk of missing the required reporting window.
Solution
A sovereign SOC that turns SAMA CSF maturity into a live, defensible score
Product
Hisn in action
How it works
From first touch to outcome
Assess
A baseline SAMA CSF maturity assessment identifies the highest-priority gaps across people, process, and technology.
Harden
Zero-trust controls and SOC monitoring are rolled out against the highest-risk systems first.
Respond
Incidents are contained automatically where possible, and escalated to the on-call team within the SAMA-aligned window.
Report
Maturity scores and incident reports are generated continuously, ready for the next SAMA examination.
Market
Sizing the opportunity
- TAM — $2.4B. GCC banking cybersecurity & managed SOC market
- SAM — $260M. Saudi bank & finance-company SAMA CSF-aligned security market
- SOM — $18M. 3-year obtainable share across licensed Saudi banks and finance companies
SAMA's tightening Cybersecurity Framework enforcement, combined with rising ransomware and fraud attempts against Saudi financial institutions, is pushing continuous, sovereign security programs from a discretionary upgrade to a supervisory expectation.
Business model
How Hisn makes money
Annual SOC platform license
Priced per institution and tiered by asset size, covering the SOC command center and CSF maturity scoring.
Managed detection & response subscription
Recurring fee for continuous monitoring, automated containment, and incident-response coverage.
Implementation & baseline assessment fee
One-time fee for the initial SAMA CSF maturity assessment and zero-trust rollout planning.
Revenue streams
Where the revenue actually comes from
Competition
Where we win
Our edge
- SAMA CSF maturity presented as a live, auditable score, not an annual PDF revisited once a year.
- Automated regulatory-notification-deadline tracking removes the risk of missing a required SAMA reporting window.
- Sovereign SOC hosted entirely in-Kingdom, not operated through an offshore MSSP command center.
- Founding team combines Saudi enterprise delivery experience with hands-on cybersecurity engineering.
Traction
Early validation, built for pilot readiness
- Full sovereign SOC product experience designed and built end-to-end: SOC command center, incident response queue, and security case detail.
- Architecture pre-aligned to SAMA CSF, PDPL, ISO 27001, and NDMO Classification.
- Actively selecting design-partner banks for a first pilot cohort.
Go-to-market
Land with a baseline assessment, prove containment speed, expand to full SOC coverage
- 1Land with 1-2 design-partner banks starting from a baseline SAMA CSF maturity assessment.
- 2Prove automated containment speed and maturity-score improvement over a defined pilot period against the bank's existing SOC process.
- 3Expand through SAMA-aligned industry security forums and inter-bank risk-management networks to reach the broader licensed-institution market.
Team
Built by operators, not just builders
The ask
Raising a seed round to reach first design-partner banks
We're raising to fund SOC platform hardening, SAMA CSF and NDMO alignment work, and the core security-engineering team through first-revenue pilot deployments.