Thawd

About Thawd

Thawd is a Saudi cybersecurity software company that describes itself as a pioneer in breach and attack simulation (BAS). Its core product, XBreach, is a platform for continuous security validation: it runs simulated attacks against an organisation's defences to show where prevention and detection controls fail, and it produces step-by-step remediation guidance.

The company's stated mission is to move the region from being a consumer of cybersecurity products to a developer of them. It targets government bodies and large enterprises in Saudi Arabia, and says it also intends to serve clients beyond the Kingdom.

XBreach simulates attacks across email, endpoint, network, web and data-protection layers. Thawd says its recommendations are mapped to the MITRE ATT&CK framework and to the compliance requirements of Saudi Arabia's National Cybersecurity Authority (NCA). Alongside the platform, Thawd sells a Cybersecurity Readiness Assessment service that measures how defences perform against real-world attack techniques.

On its website Thawd states that more than 50 organisations in Saudi Arabia have tested their defences with its technology, that it has simulated over 3,000 real-world threats drawn from local threat intelligence, and that customer satisfaction across government and enterprise deployments stands at 98 percent. It also claims an average improvement in detection and response capability within 60 days. These figures are company-reported and have not been independently confirmed.

Thawd runs a partner programme for resellers and integrators, publishes a blog, and offers its site in English and Arabic. It is registered as Thawd Security and is based in Riyadh. Founders, funding rounds and investors are not disclosed on the company's website.