Know what to buy. Trust who you hire. Prove it got done.
Scope the work, hire a verified provider, and approve delivery milestone by milestone, all in one place. Guided by AYN, the expert you don't have in-house.
Every requirement mapped to NCA, SAMA, CST and PDPL. Every provider verified. Every milestone tracked to acceptance. Buyer and provider data hosted and processed within Saudi Arabia.
Security buying is slow, unclear, and built for price.
WEEKS LOST
Scoping the RFP, hunting for credible providers, and comparing bids drags on for weeks before anyone secures anything.
UNVERIFIED CLAIMS
Glossy decks all promise the same thing. Few buyers can verify who is actually qualified and NCA or SAMA compliant.
NO EXPERT
Most teams have nobody who can scope security work or tell a strong proposal from a confident one.
PRICE TRAP
Procurement is built to reward the lowest number, and the lowest number is often the biggest risk.
NCA controls, the SAMA framework, CST regulations and PDPL are in force today. Regulators ask for evidence, not intentions.
Security talent is scarce and expensive to hire, but the obligation applies whether or not you have an expert in the room.
Cyberayn is in private preview. Buyers, providers, and advisors who join now get first access and help set the standard.
Describe the need. AYN diagnoses, questions, and drafts.
Most companies buy cybersecurity without a security expert in the room. With Cyberayn, every company has one. AYN asks the questions a consultant would ask, before any vendor sees your requirement, and shows its reasoning at every step.
- Gaps diagnosed before you write a word
- Clarifying questions tailored to your brief
- Scope and controls mapped to NCA, SAMA, CST and PDPL
- Weighted evaluation criteria and scoring model
- Timeline, milestones, and budget band recommended
Scope
24/7 security monitoring and incident response for a financial services organisation
Compliance Mapping
NCA · SAMA · CST · PDPL
Evaluation Model
Evaluation model · weighted criteria included
From need to delivery in three steps.
The scoping, drafting, and comparing that used to fill weeks is now one guided workflow.
GENERATE
Describe your need in plain language. AYN diagnoses your gaps, asks the right questions, and builds a complete RFP with every requirement mapped to Saudi regulations, in minutes. You review and approve.
MATCH
Verified providers with the right Trust Passport are invited to propose. No cold vendor lists. No sales calls you didn't ask for.
AWARD & DELIVER
Compare sealed proposals side by side and award on fit, not price. Before delivery begins, the platform generates an engagement agreement from the RFP scope, proposal price, and milestone plan — executed by both parties via a legally recognised electronic signature. Then run delivery on a shared plan, with every milestone reviewed and accepted before the next begins. You pay your provider directly; Cyberayn is not a party to the agreement and holds only a timestamped record of execution.
Contracts executed on Saudi-recognized digital signature infrastructure.
Every provider verified. Every bid scored.
No anonymous listings, no gut-feel awards. Trust Passports put evidence on the table; weighted scoring turns it into a defensible decision.
Trust Passport
- Verified NCA registration and credentials
- Outcome history and engagement track record
- A transparent trust score on every profile
Evaluation Model Parameters
The best fit wins, never the cheapest.
Protected by design
Saudi data residency, regulatory alignment, and legally recognised agreement execution — built in from day one.
Saudi data residency
All RFP content and provider credentials are stored and processed within the Kingdom. Data sovereignty is a technical control, not a policy aspiration.
NCA & SAMA aligned
Platform controls map to NCA ECC/CCC and SAMA CSF requirements — the same frameworks you procure against govern how we operate.
Confidential by design
RFP content is visible only to the buyer and explicitly approved providers. Role-based access controls are enforced throughout, with no cross-buyer exposure.
Agreement execution
Engagement agreements are executed via legally recognised electronic signature under Saudi Electronic Transactions Law. Cyberayn records who signed and when.
Encrypted & monitored
All data is encrypted in transit (TLS 1.2+) and at rest. Infrastructure runs in GCC-region data centres with 24/7 monitoring and automated alerting.
Free to join. Pay as you grow.
Buyers source for free. Providers join free, upgrade to Pro to compete at volume, and pay a success commission only when they win.
See full pricingFounding-member offer: Pro membership and verification are free until 31 December 2026.
Are you a capable security provider?
Join the network where verified capability wins the work, not the lowest bid. Free to join and propose. Compete on merit, not marketing budget.
Apply for a Trust PassportDoes money move through Cyberayn?
No. You pay your provider directly. Cyberayn tracks milestones and acceptance so both sides share one record of what was agreed and delivered. The platform charges its own fees separately, and buyers source for free.
Is the agreement legally binding?
Yes. After a buyer awards an engagement, the platform generates a structured engagement agreement from the RFP scope, the winning proposal's price, and the agreed milestone plan. Both the buyer and the provider execute it via a legally recognised electronic signature, consistent with Saudi Electronic Transactions Law. The contract is between the buyer and provider only — Cyberayn is not a party. Cyberayn's role is limited to generating the agreement and keeping a timestamped record of execution.
Does AYN decide who wins?
No. AYN evaluates every proposal against weighted criteria and shows its reasoning. You compare, question, and award. Every decision stays with you.
Who sees my RFP?
Only the verified providers matched to it. There is no open bidding wall. Your requirements, budgets, and proposals stay inside a curated process from draft to award.
How are providers verified?
Every provider passes verification before appearing in the directory. Their Trust Passport shows registration, certifications, and delivery track record.
Make your next security decision the confident one.
Cyberayn is in private preview. Request access now and be in the first cohort of buyers, providers, and advisors shaping it.