Tahsin · Pitch Deck
Industrial · OT SECURITY ASSESSMENT
Tahsinتحصين
Every ICS and SCADA asset assessed against NCA OTCC and IEC 62443 — before an adversary finds the gap first.
neuriya.ai — Sovereign, Arabic-first enterprise AI
Problem
Saudi OT/ICS operators can't answer "what's actually on our network"
- Many operators track ICS/SCADA assets in spreadsheets last updated at commissioning, with PLCs, RTUs, and HMIs added since then untracked.
- Showing compliance to NCA OTCC and IEC 62443 today means a manual, point-in-time consultant engagement that goes stale the day the report is filed.
- OT/IT segmentation is usually assumed from a network diagram rather than tested directly, even though a poorly enforced boundary is the most common root cause of OT breaches.
- Security findings pile up as PDF reports with no ownership or tracked closure, so critical gaps sit open past the audit cycle.
Solution
A living asset inventory and compliance score, not a one-time consultant report
Product
Tahsin in action
How it works
From first touch to outcome
Discover
Every ICS/SCADA asset across every connected site is inventoried automatically, without disrupting live operations.
Assess
Assets are scored against IEC 62443 and NCA OTCC controls, surfacing critical and high findings first.
Remediate
Findings become a prioritized, assigned remediation plan with clear ownership and deadlines.
Report
A consolidated, sign-off-ready assessment report is generated for compliance and executive review.
Market
Sizing the opportunity
- TAM — $2.1B. MENA OT/ICS cybersecurity market
- SAM — $220M. Saudi OT/ICS security assessment & compliance market
- SOM — $16M. 3-year obtainable share via design-partner critical-infrastructure operators
NCA's Operational Technology Cybersecurity Controls and Vision 2030's critical-infrastructure protection agenda are pushing every Saudi industrial operator toward a documented, auditable OT security posture, turning what was a discretionary assessment into a recurring compliance requirement.
Business model
How Tahsin makes money
Per-site assessment subscription
Recurring fee priced by number of sites and connected OT assets under continuous assessment.
Compliance reporting tier
Add-on subscription for NCA OTCC- and IEC 62443-ready reporting packages generated on demand.
Initial assessment & onboarding fee
One-time fee to complete first full-site discovery and baseline scoring.
Revenue streams
Where the revenue actually comes from
Competition
Where we win
Our edge
- Continuous asset discovery replaces the one-time consultant snapshot, so the compliance score is always current, not a year stale.
- Assessment methodology and evidence collection map directly to NCA OTCC and IEC 62443 zone-and-conduit structure, ready for regulator review without reformatting.
- Sovereign, in-Kingdom hosting for every assessment report and asset record, satisfying NDMO Classification requirements global platforms aren't built for.
- Founding team combines Saudi critical-infrastructure operations experience with OT/ICS security engineering.
Traction
Early validation, built for pilot readiness
- Full OT security assessment product experience built end-to-end: asset discovery dashboard, IEC 62443 scoring, remediation tracking, and sign-off-ready reporting.
- Architecture pre-aligned to NCA OTCC, IEC 62443, NDMO Classification, and ISO 27001.
- Actively selecting design-partner industrial and critical-infrastructure operators for a first pilot cohort.
Go-to-market
Land on one site's asset inventory, expand to fleet-wide compliance
- 1Land with 1-2 design-partner critical-infrastructure operators, starting with full asset discovery on a single site.
- 2Prove compliance-score accuracy and remediation-tracking value over a pilot quarter.
- 3Expand across the operator's full site portfolio and into adjacent regulated sectors via NCA-aligned referrals.
Team
Built by operators, not just builders
The ask
Raising a seed round to reach first assessment pilots
We're raising to fund IEC 62443/NCA OTCC scoring-engine development, in-Kingdom deployment tooling, and the core team through first-revenue pilot deployments.