Made in Saudi Arabia
The Complete Platform for
Phishing Simulation|
Comprehensive cybersecurity solution — from attack simulation to compliance management, everything you need in one AI-powered platform.
The Journey Continues
From Idea to First Place
The Sabry team won first place in #Cybersecurity_Challenge by developing an integrated platform for cybersecurity awareness, phishing simulation, and automated phishing email analysis.
First Place in Cybersecurity Challenge
Developing Innovative Cybersecurity Solutions
Automated Phishing Email Analysis
ZeroPhish Products
Innovative products that make a difference in the world of cybersecurity and protecting organizations
Phishing Simulation
An easy-to-use platform with ready-made content and templates for phishing simulations and measuring employees' cybersecurity awareness levels
Awareness & Training
Platform integration with awareness content management and phishing report management with ease, along with exceptional training content
Compliance Management
Integrated system for policy distribution, monitoring, and measuring compliance level with cybersecurity policies
Cyber Crisis Management
Train response teams for cyber crisis management through realistic tabletop exercises (TTX) that test readiness and strengthen coordination between teams
AI Tool Monitoring
NewFull visibility and real-time control over employee AI tool usage — a lightweight browser extension integrated with the LMS for PII detection and compliance enforcement
GRC Platform
Comprehensive self-assessment for NCA, SAMA and Aramco controls — assign evidence upload tasks to users, centralized evidence library, and UCL framework for reusable evidence across controls
Risk Registers
Integrated cyber risk register management — identify and assess risks, assign owners, track treatment plans and controls, and view live risk reports across the organisation
Engage
Awareness notification platform for employees — send security awareness posters, awareness emails, updates and organisational announcements using ready-made templates with flexible scheduling
Gamification
Gamification elements that motivate employees to engage and learn — leaderboard, accumulated levels and points, achievement badges, and performance rewards for a competitive and fun learning environment
Phishing Simulation System
A comprehensive set of advanced features to enhance cybersecurity awareness
Diverse Phishing Templates
Varied templates that can be customized according to the organization's needs
Campaign Activity Tracking
Analysis and tracking of phishing campaigns and monitoring interactions in real-time
Process Automation
Enabling automatic procedures to simplify operations and workflows
Comprehensive Reports
Detailed reports on campaign activity and employee performance
Compliance Level Assessment
Monitoring and evaluating compliance with cybersecurity policies
Controls Compliance
Installation and configuration according to national cybersecurity controls
Content and Educational Materials Design
We design custom educational and awareness materials for clients according to their identities and requirements, including interactive materials, complete courses with tests and certificates
Educational Materials and Complete Courses
Simplified interactive materials that comply with standards
Support for Quick Tests
Achieving benefits and feedback for better development
Short Video Production
Interactive visual content with appealing cartoon characters
Support for Arabic and English
Multilingual content to support all employees
LMS Awareness Content Management System
Integrated platform for managing cybersecurity training and awareness
Customizable Learning Paths
Create customizable learning paths that match different roles and departments
Interactive Content
Providing engaging interactive course content including videos, tests, and various forms of content
Progress Tracking and Reporting
Track and monitor individual and group progress using detailed reports and dashboards
Certificate and Compliance Management
Facilitate certificate management and compliance through automatic tracking and renewal of certificates
AI Tool Monitoring
Complete visibility and real-time control over AI tool usage across the organisation — without disrupting productivity
A lightweight browser extension integrated with the LMS that gives security and GRC teams instant visibility and full control over the AI tools employees use
Fast & Easy Deployment
A lightweight Chrome MV3 extension that runs silently in the background — monitors 8 built-in AI tools (ChatGPT, Gemini, Copilot, Claude and more) and auto-provisions via Azure AD with no manual steps
PII Detection
Detects sensitive data before it leaves the browser — National ID, Saudi IBAN, phone numbers and email addresses. Supports custom regex patterns and all checks run locally with no content sent to the server
File Upload Scanning
Intercepts file uploads before they are sent — scans text-based files (txt, csv, json) for sensitive data, blocks specified extensions entirely, and flags suspicious filenames automatically
Compliance Enforcement
Ties AI tool access to completion of courses and policies in the LMS — multiple enforcement modes (AI Sites / All Sites / Hard Block) configurable at org level or per individual employee
Admin Dashboard
Real-time event log showing AI usage across the entire organisation — summary stats, most-used tools, and colour-coded badges for each event type (install, PII, files, block)
Notifications & Customisation
Broadcast in-app notifications to all employees with read-receipt tracking — and fully customise every string shown in the extension including complete Arabic support, all without developer involvement
Privacy & Security
- All scanning runs locally in the browser — message content is never sent to the server
- Only metadata is logged: tool, event type, PII category and count — never message content
- Fully isolated: separate database, JWT secret and settings per tenant (Multi-Tenant)
- Fail-Open: stale or missing compliance data defaults to compliant — no false blocks
Fully Configurable, No Code
- Enable or disable each built-in PII rule independently from the settings panel
- Add custom regex patterns with inline test validation inside the admin panel
- Add or remove AI tools from the monitored list with a single click
- Edit every string employees see in the extension — supports any language including Arabic
Compliance Controls
ZeroPhish system helps you comply with national and international standards and controls
NCA
Essential Cybersecurity Controls
ISO 27001
International Information Security Standards
SAMA
Saudi Central Bank Cybersecurity Framework
Aramco CCC
Aramco Information Security Controls
Key Compliance Features
- Customized compliance reports for each standard or control
- Dashboards for tracking compliance level in real-time
- Automatic updates when standards and controls change
- Complete documentation of procedures and policies
Our Clients
Leading companies from various Saudi and global sectors trust us
What Our Clients Say
Experiences of organizations using our platform to enhance cybersecurity awareness
"The ZeroPhish platform has greatly helped us raise the level of cybersecurity awareness among our employees, and we have noticed a significant decrease in the click rate on real phishing messages."
Mohammed Al-Otaibi
Banking Sector
"The detailed reports and analytics provided by the platform have helped us identify weaknesses and work on improving them. Excellent experience with outstanding technical support."
Sarah Al-Muhairi
Healthcare Sector
"The phishing simulation system and awareness content management have become an integral part of our cybersecurity strategy and have contributed to meeting compliance requirements."
Fahd Al-Dosari
Telcom Sector
Frequently Asked Questions
Answers to the most common questions about the ZeroPhish platform
How does the phishing simulation platform work?
The platform sends simulated phishing emails to employees that mimic real ones to measure their response and awareness of phishing risks. Results are tracked and analyzed to identify areas that need improvement.
How difficult is it to implement and manage the system?
The ZeroPhish platform is designed to be user-friendly and requires minimal setup. Our team provides full support during the implementation process and comprehensive training for your IT team.
Does the platform comply with local regulations?
Yes, the ZeroPhish platform is designed to comply with the National Cybersecurity Authority (NCA) controls, Saudi Central Bank (SAMA) framework, and Aramco Cybersecurity Controls (CCC).
How is the awareness content customized?
We provide custom content design services that match your organization's identity and culture. We can create educational materials, short videos, and interactive content in both Arabic and English.
What is the cost of the platform?
The cost varies based on the size of your organization and its specific needs. We offer flexible plans suitable for organizations of various sizes. Please contact us for a customized quote.
Can the platform be integrated with our existing systems?
Yes, the ZeroPhish platform supports integration with a wide range of systems including identity management systems, email systems, and existing e-learning platforms.
Startup Package
Enhance your startup's protection with budget-friendly pricing. Comprehensive cybersecurity solutions that grow with your business
Budget-Friendly Pricing
50% discount off standard packages specifically for startups, with flexible monthly payment options
Quick & Easy Setup
Ready to use within 24 hours, without technical complexities or the need for specialized experts
Grows With Your Company
Flexible package that adapts to your changing needs and business expansion without requiring system changes
Package Includes
-
Phishing attack simulations for employees (up to 90 employees)
-
Ready-made training content customized for startups
-
Dashboard with simplified, easy-to-understand reports
-
Technical and advisory support dedicated to startups
-
Compliance certificates with National Cybersecurity Authority and Central Bank (SAMA) requirements
-
Exclusive feature: Free quarterly consultation session
Competitive Price
Specially designed for startups
Eligibility requirements:
- Startups (less than 3 years old)
- Fewer than 90 employees
- Registered on "Monsha'at" platform or business incubators