ESET treats Saudi growth as a channel problem, not a product one

ESET brought a set of enhancements to its ESET PROTECT platform to LEAP 2026 in Riyadh, describing them as AI-native security with extended detection and response and next-generation threat detection, and naming Saudi Arabia as a strategic growth market it intends to serve through continued investment in its partner ecosystem rather than a direct sales build-out. The European vendor's position in the Gulf has always been a channel position. ESET sells through distributors and resellers almost everywhere, and its stated Saudi investment is in technical enablement, sales support and joint go-to-market activity with partners — training people to sell and deploy the product rather than hiring people to do it. For a company competing against American security vendors with far larger local field organisations, that is the only economically sensible shape, and it puts the burden of customer relationships on partners who also carry three or four competing lines. The pitch behind the platform update is that Saudi organisations are expanding cloud adoption, modernising digital services and connecting more infrastructure, which enlarges the attack surface faster than security teams grow. That is an accurate description of the Kingdom's position and an unremarkable one — every vendor at the show is making some version of it. The distinguishing claim is the endpoint layer: ESET's business has historically been built on detection running on the device itself rather than on a cloud analytics service, which matters in environments where a data-residency rule or an air-gapped network limits what can be sent off-site for analysis. "AI-native" is doing a lot of work in the description, and the announcement does not define it. Machine learning has been standard in endpoint detection for a decade; what would be new is a model making containment decisions autonomously, or a language model summarising incidents for analysts who do not have the time to read raw telemetry. Which of those ESET means is not stated, and the company has not published detection benchmarks alongside the launch. Saudi security spending is one of the more genuinely competitive segments at this event. Distributors are packaging security portfolios for exactly this demand — AmiViz built its LEAP showcase around cybersecurity, data resilience and sovereign cloud with a roster of vendor brands — while long-established local suppliers work the same buyers, among them Al Maalim, which has been selling smart-card and integrated security systems in the Kingdom for three decades . Above all of it sits the regulator: the National Cybersecurity Authority sets the controls Saudi entities must meet and has been busy at this event, including signing a bilateral cooperation memorandum with Pakistan . Nothing in ESET's announcement is quantified. There is no Saudi revenue figure, no partner count, no named customer, no local entity or office disclosed, and no commitment to in-Kingdom data processing — which is the question a regulated Saudi buyer will ask first. The company's participation is a showcase, not a deal. The useful test is whether ESET can name a Saudi bank, ministry or large enterprise as a customer, and whether the partner it names as the integrator is one that sells ESET first rather than fourth. TechScoop is reporting from LEAP 2026 in Riyadh.