PCI DSS
Protect payment card data and prepare for your PCI DSS assessment.
Learn moreProtect your online store, your payments and your customers' data. We assess your e-commerce operation against the National Cybersecurity Authority's Cybersecurity Guidelines for e-Commerce and fix what matters first.
The Cybersecurity Guidelines for e-Commerce (CGEC) from the National Cybersecurity Authority help online businesses in the Kingdom raise their cybersecurity, and help consumers shop safely. They address the risks that come with selling online: account takeover, payment fraud, data leaks and attacks on the store itself.
For merchants, the guidelines cover the security of the store platform and its administration, protection of customer data and payments, secure development and hosting, the third parties that plug into the store, and readiness to respond when something goes wrong.
Every engagement follows the Cyber Shields rhythm: Assess, Protect, Monitor. For this engagement, that translates into the following steps.
Findings are anchored to recognized frameworks so they are defensible and cross-mappable.
The documents behind this page, linked at the publisher. Where a Saudi regulation is published in both languages, the Arabic text is the binding version.
Every engagement is scoped individually. Pricing depends on the size and complexity of your environment, the systems or controls in scope, and the timeline you need to work to. Rather than publish figures that rarely fit a specific situation, we prepare a written proposal with a clear fee and schedule once your scope is understood.
Tell us about your organization and the deadline you are working toward, and we will return a tailored proposal within five business days, following a signed Non-Disclosure Agreement.
Yes. The platform secures its core, but admin access, apps, integrations, staff accounts and customer data handling remain your responsibility.
It covers how payments flow through your store. If you store, process or transmit card data, PCI DSS also applies, and we can prepare you for it.
No. Tests are agreed in advance, scheduled for quiet periods and designed not to disrupt the live store.
Yes. Reports, the executive summary, and the readout session are available in both Arabic and English at no additional cost.
Protect payment card data and prepare for your PCI DSS assessment.
Learn moreManual and tool-assisted testing of web applications against the OWASP testing methodology, covering authentication, access control, injection, and business logic.
Learn moreReadiness for the Personal Data Protection Law: data governance, records of processing, and data-subject rights handling.
Learn moreWhat the platform protects, what you protect, and ten steps every Saudi online store should take.
Read the articleTell us about your store and we will return a written proposal within five business days. NDA first, always.