Sovereign by Design: UAE Builds National Threat Intelligence and AI Code Security as Saudi Market Hits SAR16.3 Billion

Week of 19 October 2026 | Compiled by Team Paringa

Two UAE announcements this week show national cyber capability being built, hosted and governed in-country, while the Saudi NCA published fresh market data. This brief covers what that means for GCC security buyers and service providers.

What Happened This Week

🔴 UAE Cyber Security Council and etisalat UAE develop "Discovery Secure" threat intelligence platform

TechAfrica News reported on 16 October that the UAE Cyber Security Council (CSC) and etisalat UAE have developed Discovery Secure, a centralised platform for managing the visibility and governance of cyber threat intelligence in a role-governed environment. It is designed, developed and hosted in the UAE and is currently at proof-of-concept stage.

The platform is meant to support national-level threat analysis by turning raw data into structured, actionable insight. Reported functions include centralised ingestion of threat intelligence, analyst workflows for investigation, enrichment and assessment, role-based access by organisational scope, summarised views for decision-makers, and traceability and audit readiness.

Dr Mohamed Al Kuwaiti, Head of Cyber Security for the UAE Government, said effective threat intelligence is about "turning relevant information into a clear and timely understanding of risk." Abdulla Al Ahmed of etisalat UAE said the platform will help security teams assess threats with greater precision. The article gives no figures, rollout dates or user counts.

Sources: TechAfrica News

A nationally hosted threat intelligence platform will shape what government and critical infrastructure buyers expect from private providers. Position your threat intelligence and managed detection offers around integration, data residency and audit trails rather than proprietary feeds alone. It is still a proof of concept, so use the window to start conversations with customers on how your service would feed or consume national intelligence.

🔴 Microsoft, Core42 and Open Innovation AI advance MDASH rollout across UAE government

Intelligent CISO reported on 16 October that Microsoft, Core42 (a G42 company) and Open Innovation AI, working with the CSC, are moving MDASH from initial availability to adoption across UAE government entities. MDASH is Microsoft's AI-driven code scanning system, using more than 100 specialised AI agents to find software weaknesses, judge whether attackers could exploit them and rank them by urgency.

The next phase includes pilot deployments, technical workshops, onboarding and implementation support. MDASH's code-safety capabilities are also being added to the UAE's National AI Test and Validation Lab, which was set up earlier in 2026, is hosted in the UAE and operates under CSC governance. Core42 supplies sovereign infrastructure through its Sovereign Enabled Public Cloud and Insight controls platform, and Open Innovation AI handles technical integration.

Dr Al Kuwaiti said: "Securing the UAE's digital future starts with securing the code behind our critical services." The article does not say how many government entities are taking part or give a wider deployment timetable.

Sources: Intelligent CISO

Application security is moving up the national agenda, and it is arriving with AI-assisted scanning and sovereign hosting as the default. Service providers who sell secure development, code review or penetration testing should be ready to explain how their work complements AI-driven scanning, especially triage, remediation and validation of findings. Expect suppliers to government to be asked about code assurance more often.

🟡 Saudi NCA: cybersecurity market reaches SAR16.3 billion

The Saudi Press Agency reported on 14 October that the National Cybersecurity Authority (NCA) published its "Key Economic Indicators in the Cybersecurity Sector 2026" report. The market reached SAR16.3 billion in 2025, a 10.7% compound annual growth rate from 2023 to 2025. Government entities spent about SAR5.1 billion (31%) and the private sector SAR11.2 billion (69%). Products accounted for SAR8.3 billion (51%) and services SAR7.9 billion (49%).

The sector contributed about SAR20 billion to GDP in 2025, or 0.42% of total GDP and 0.71% of non-oil GDP. The workforce exceeded 22,000 professionals, growing about 5.9% a year, with women making up 33%, against a global average of about 22%. Most in-demand areas were endpoint security and management, network security, security operations, system integration and data security.

Sources: Saudi Press Agency

The private sector is the larger spender in Saudi Arabia, which is useful if you have been targeting government alone. Near-even product and service spend supports a services-led entry, and the top demand areas map well to managed security operations and integration work. Use the NCA figures in your account planning, but remember they are market-wide, not a forecast for any single segment.

What GCC Security Leaders Are Dealing With

Security leaders are being asked to align with national capability. In the UAE, threat intelligence and code assurance are being built in-country with named partners, and procurement is likely to follow. In Saudi Arabia, a growing market is also a competitive one, with a workforce of just over 22,000 and strong demand for security operations and integration skills.

The common thread is sovereignty and evidence: where data is hosted, who governs it, and whether you can show an audit trail.

Three Things Worth Watching Next Week

1. Discovery Secure beyond proof of concept — Watch for pilot users, sector scope or further partners.

2. MDASH pilots across government entities — Look for named adopters and the National AI Test and Validation Lab outputs.

3. Saudi market follow-up — Expect commentary on the NCA figures and any new framework updates affecting private-sector operators.

Could not verify: any new NCA control or framework announcement dated 12-19 October 2026

Questions? hello@paringa.ai

Paringa works with Ghobash Group's CNS to help GCC organisations turn threat intelligence into practical, tested defence. We focus on outcomes buyers can measure rather than tool lists. | 19 October 2026 | © Paringa Ltd