Rasid · Pitch Deck
Cybersecurity
Rasidراصد
LLM-and-agent-driven detection that triages alerts and automates response.
neuriya.ai — Sovereign, Arabic-first enterprise AI
Problem
SOC analysts drown in alerts, and most of it is noise
- A mid-sized SOC can generate thousands of alerts a day, and analysts spend most of their shift triaging noise instead of investigating real threats.
- Auto-closing an alert without a clear reasoning trail leaves analysts unable to justify the decision to an auditor or a SAMA examiner.
- Detection rules tuned once at deployment drift out of sync with the environment, so false-positive rates climb instead of falling over time.
- Response actions — locking an account, blocking an IP — are logged manually if at all, leaving a thin audit trail when an incident is reviewed later.
Solution
An agent investigates every alert and shows its reasoning before acting
Product
Rasid in action
How it works
From first touch to outcome
Ingest alerts
Alerts stream in from EDR, SIEM, and network sensors in real time.
Agent investigates
The agent gathers context and reaches a decision with a confidence score.
Act or escalate
High-confidence, low-risk alerts close automatically; the rest go to an analyst.
Learn and improve
Analyst feedback on escalations continuously improves detection accuracy.
Market
Sizing the opportunity
- TAM — $2.4B. GCC AI-driven security operations & detection market
- SAM — $310M. Saudi AI-based SOC and alert-automation platform market
- SOM — $19M. 3-year obtainable share via NCA-regulated enterprise SOC teams
NCA's ECC-2 controls and SAMA's CSF both push regulated Saudi entities toward faster, evidenced incident response, and the volume of alerts a typical SOC handles is growing faster than security teams can hire analysts — making agentic triage a staffing answer as much as a technology one.
Business model
How Rasid makes money
Per-analyst-seat subscription
Priced by the number of SOC analysts using the triage and escalation workspace.
Alert-volume tier
Recurring pricing tiered by monthly alert volume processed by the agent.
Environment onboarding fee
One-time fee to connect EDR, SIEM, and network sensors and tune detection to the environment.
Revenue streams
Where the revenue actually comes from
Competition
Where we win
Our edge
- Every agent decision ships with a reasoning trail and confidence score, not a black-box auto-close.
- Human-in-the-loop escalation is a structural rule, not a configuration option someone can quietly disable.
- Sovereign, auditable-by-design hosting — every agent decision logged and reviewable in-Kingdom.
- Founding team combines Saudi enterprise delivery experience with hands-on applied-AI engineering.
Traction
Early validation, built for pilot readiness
- Full detection platform experience designed and built end-to-end: alert ingestion, agent triage, human escalation, and feedback-driven tuning.
- Architecture pre-aligned to NCA ECC-2, SAMA CSF, PDPL, and ISO 27001.
- Actively selecting design-partner security operations teams for a first pilot cohort.
Go-to-market
Land on one alert source, expand to the full SOC pipeline
- 1Land with 2-3 design-partner SOC teams, starting with a single high-volume alert source such as EDR or SIEM.
- 2Prove false-positive reduction and mean-time-to-triage gains over a pilot quarter.
- 3Expand across additional alert sources and into managed-SOC provider partnerships.
Team
Built by operators, not just builders
The ask
Raising a seed round to reach first design-partner SOC teams
We're raising to fund detection-engineering tuning, EDR/SIEM integrations, and the core applied-AI and engineering team through first-revenue pilot deployments.