What we mean by "produces evidence"
Sekeye does not grant NESA or NCA compliance. It is being built to produce the software inventory, exposure, and incident-response artefacts these regimes require, inside your data-residency perimeter and with self-hosted deployment where mandated.
UAE Information Assurance (IA) / NESA
- Asset inventory including software. Endpoint software layer that underpins the T3 controls.
- Vulnerability management with a defensible remediation trail. Findings, closure states, and rotation checklists.
- Data residency and sovereign deployment. Self-hosted mode supports Gulf sovereignty requirements.
Saudi NCA ECC (Essential Cybersecurity Controls)
- Asset management. Fleet inventory of the self-installed software layer.
- Vulnerability management. Continuous CVE match, closure tracking.
- Incident management. Campaign scope and per-endpoint findings feed the incident timeline.