ZeroPhish（زيروفيش） is a cybersecurity awareness platform built by a Saudi team, centered on phishing email simulation, employee training, compliance management, and cyber crisis drills. The website highlights that it is “100% Saudi technology,” uses local servers, and provides 24/7 local support, clearly positioning it for Saudi organizations and institutions subject to Saudi regulatory requirements.
In terms of protection type, this is not a traditional perimeter firewall or EDR product. Instead, it protects by focusing on the “human” factor: simulating phishing attacks, tracking click rates and reporting rates, identifying risky employee behavior, and delivering instant training to employees who click phishing emails. The platform provides more than 90 email templates, supports AI-generated phishing samples, and includes Arabic-localized content. Its training module includes a built-in LMS with interactive courses, quizzes, certificates, SCORM support, and multiple content formats, available in both Arabic and English.
Compliance is a major selling point of the product. The materials state that its content and reporting can help meet requirements related to NCA, SAMA, Aramco CCC, and ISO 27001, and that it can generate standardized compliance reports while tracking policy reading and certificate status. For deployment, the site only clearly emphasizes “100% local servers” and compliance with Saudi regulations; it does not specify whether private deployment, pure SaaS, or hybrid deployment is supported. Integration capabilities include LDAP/Active Directory user import, and the platform claims it can integrate with identity management systems, email systems, and existing learning platforms, but details such as API and SSO support are not disclosed.
Enterprise pricing requires contacting sales and is customized based on organization size and requirements. The website does disclose a startup package: for companies established less than 3 years ago, with fewer than 90 employees, and meeting the registration requirements, the price is 8,099 Saudi riyals/year or 675 Saudi riyals/month. This is a significant discount from the original price of 23,999 Saudi riyals and includes phishing exercises, training content, simplified reporting, support, and quarterly consultation. For Saudi startups, it offers relatively strong value for money.
Its strengths are strong Saudi localization, a clear compliance focus, coverage of the full loop from phishing simulation to training, and local support. Its drawbacks are the lack of key procurement details in public materials, such as enterprise pricing, deployment architecture, data security certifications, API details, and a real customer list. It is best suited for Saudi government-related organizations, financial institutions, healthcare providers, telecom companies, and local businesses that need to meet NCA/SAMA requirements.
The website does not provide information on access from China, RMB payments, or local deployment in China, so its accessibility should be considered unknown. If a Chinese company is mainly focused on domestic regulatory requirements and employee training, it may also evaluate local security awareness training and phishing simulation platforms, or international alternatives such as KnowBe4, Proofpoint Security Awareness, Cofense, Hoxhunt, and the open-source GoPhish.
⚠ This review is compiled from public sources and does not constitute a purchase recommendation. Verify all facts on the vendor's official site. Verify on sabry.sa official site.
sabry.sa is an Saudi Arabia Cybersecurity provider. TG4G tracks its product information, an overall rating of 7.0/10, and a China-accessibility score of Workable. Click "Visit Official Site" to reach sabry.sa directly.