10 yearsin cybersecurity
150+companies passed Aramco CCC
Gold PartnerSophos & Fortinet

Our projects and clients across Saudi Arabia

Our projects and clients have one thing in common: they need IT that works and security that stands up to an audit. From our base in Al Khobar we serve companies in Dammam, Dhahran, Jubail, Riyadh and the rest of the Kingdom.

We do not publish client names on this page. Many of our clients are suppliers to large Saudi companies and prefer to keep their vendor details private. Instead, here are the sectors we serve and the results we can state plainly.

What our clients ask for varies by sector. Suppliers usually start with a compliance deadline. Hotels and schools often start with Wi-Fi, CCTV or a slow network. Factories need both: secure office systems and well-protected site networks. In every case we start with an honest assessment and a written plan.

Modern lobby with marble reception desk and elevators

Our Aramco CCC record

Every company that does business with Aramco Group companies must hold a Cybersecurity Compliance Certificate (CCC). Aramco, SABIC and other Aramco Group companies accept it. The certificate is valid for 2 years and must be renewed before it expires.

Waves has supported more than 150 companies through Aramco CCC, and all of them passed. A typical project takes 3 to 5 weeks, from first gap assessment to evidence ready for the Authorized Audit Firm. Waves is the readiness and remediation partner; the assessment is done by an Aramco Authorized Audit Firm.

For many suppliers, CCC is the first project with us. Once the network is mapped and secured, renewals and new classifications are faster, because the evidence and configurations are already documented.

150+ companies supported through Aramco CCC. All passed. Typical timeline 3–5 weeks.
Students working at networked computers in a school computer lab

What a typical project looks like

First call

You tell us your sector, sites and deadline by phone, WhatsApp or the form below.

Site or remote assessment

We review your network, devices and policies, and list the gaps clearly.

Proposal

You get a written scope and plan, with options where they make sense.

Delivery

Our certified staff install, configure and document the work.

Handover and support

We hand over records and evidence, and stay available for support and renewals.

Brands we deliver for our clients

SophosFortinetMicrosoftDellHPECiscoKnowBe4Blancco

Frequently asked questions

Can you share references?

Yes, on request. We can put serious buyers in touch with clients who have agreed to speak about their project. Ask us when you contact us.

Why don't you list client names?

Many of our clients are suppliers to large Saudi companies and prefer to keep their vendor relationships private. We respect that, so we describe the sectors we serve instead.

Have all your CCC clients really passed?

Yes. Of the more than 150 companies we have supported through Aramco CCC, all of them passed. We prepare each client properly before they submit to the Authorized Audit Firm.

Do you work with small companies?

Yes. Many CCC clients are small contractors and service firms. We size the work to your network and your classification, so you only fix what the standard requires.

Do you work outside the Eastern Province?

Yes. We are based in Al Khobar and serve Riyadh and the rest of Saudi Arabia. Much of the compliance work can be done remotely, and engineers travel for on-site tasks.

My sector is not listed. Can you still help?

Most likely. The sectors above are where we work most often, but the same security and IT needs apply to many businesses. Call or WhatsApp us and we will tell you honestly if we are a good fit.

Join the companies that passed with Waves

Tell us your sector and deadline. We will reply with a clear next step.

WhatsApp us

Talk to Waves

    العربية
    Verified by MonsterInsights