Legacy core banking
Core systems dating from before the cloud era still run the books, and the modernisation path has to keep them running while it happens.
Industry · Banking & Financial Services
Banking & Financial Services
Resilient, SAMA-compliant infrastructure and cybersecurity for Saudi banks, fintechs, and insurance companies.
Banking IT is now an evidence problem.
Detection without provable evidence does not pass SAMA's review.
SAMA expects the audit pack ready continuously, not just "we have the policy", but proof of execution. NCA-ECC layers on top. PDPL adds residency. The cost of getting any of them wrong is regulatory, reputational, and operational.
We embed the evidence chain at delivery time, mapped to control IDs, indexed by date, so audit cycles become routine instead of crises.
Three patterns we see, and solve.
Regulator-evidence cycle
SAMA expects the audit pack ready continuously, not just "we have the policy", but proof of execution.
Real-time fraud detection
Card and transfer fraud now move faster than batch detection cycles can catch, the detection loop has to be real-time too.
Three things we ship for banking.
// cap.01
SAMA-aligned architecture
Reference architectures mapped against SAMA SCF clauses, so audit traceability is structural, not bolted on.
// cap.02
Real-time fraud detection
EDR/XDR extended to transaction-level patterns, behavioural correlation across customer, account, and channel.
// cap.03
Audit-cycle delivery
Evidence captured continuously and indexed against control IDs, the audit pack is the deliverable, not an afterthought.
What this looks like, framed as outcomes.
// SOL.03
Pass the NCA assessment first time
Full ECC control coverage with SAMA SCF overlay, submission-ready evidence pack, zero remediation findings to date.
Open solution // SOL.01Always-on operations
Tested recovery posture for core banking and channel systems, RPO < 15 min, validated RTO < 1 hr.
Open solution // SOL.06Threats that get caught
EDR/XDR for endpoints, cloud, identity, network, extended to transaction-level fraud correlation.
Open solutionCompliance, by design.
// frameworks
SAMA SCF
NCA-ECC
PDPL
PCI-DSS
ISO 9001
// 06 · Engage
Talk to the banking sector lead.
A 30-minute call on SAMA SCF posture, real-time fraud detection, and audit-cycle delivery, with the banking lead, not a sales person. No deck, no pitch.