Everything you need to get going.
How the platform works, how to run your first agent, which agents each plan includes, and the frameworks we cover. Short, practical, and current.
Quickstart
From sign-up to your first finding in about ten minutes. Each step unlocks the next.
- Create your account. Sign up, verify your email, and set up two-factor authentication (required).
- Talk to us. We scope which plan fits your frameworks and team, agree the contract, and activate your workspace. There is no self-serve checkout.
- Complete your baseline. Answer the questionnaire about your jurisdictions, systems, and controls, and register your AI systems.
- Lock the baseline. Locking is your “ready to run” signal — agents only run against a locked baseline so every output maps to a known snapshot.
- Run your first agent. Open the agent board and run Core Compliance (or start with Advisory Chat, which is always included).
How NibraSec works
Your plan decides what your workspace can do. An active plan is required to run any agent.
1 · Your plan
Four tiers by use case, quoted per organisation. The plan sets which agents you can run and how many frameworks you can assess against. Advisory Chat is unlimited on every plan.
2 · Your baseline
Every agent reads from one locked baseline, so each output maps to a known snapshot of your organisation and findings can be compared between runs.
| State | What happens |
|---|---|
| Workspace not activated | Platform read-only · agent runs blocked |
| Active plan, baseline not locked | Advisory Chat works · agents wait for a locked baseline |
| Active plan + locked baseline | Full access to the agents your plan includes |
The baseline
The baseline is the single source of truth every agent reads from. It has two parts:
- The questionnaire — ~30 answers about your jurisdictions, business, and current controls.
- Your AI systems inventory — each system’s purpose, decision impact, data categories, and criticality.
Agents run only when the baseline is locked. Locking freezes the snapshot a run is built against; if you change answers later, unlock, edit, and re-lock — prior outputs are marked stale so you know to re-run.
The agents
Five specialists run against your locked baseline. Advisory Chat is included on every plan; the others depend on your tier.
| Agent | What it does | Available on |
|---|---|---|
| Core Compliance | Reads your baseline, classifies each AI system by risk, maps it to your frameworks, and produces a board-ready risk register + 12-month roadmap. | All plans |
| Regulation Watch | A daily digest of what changed across your regulators, impact-tagged for your specific portfolio. | Growth, Enterprise, Sovereign |
| Advisory Chat | Bilingual (EN/AR) Q&A grounded in your baseline, your systems, and the regulatory knowledge base — every answer cites the clause. | All plans |
| Governance Docs | Drafts policies, procedures, and control statements matched to your house style. Charged per policy drafted. | All plans |
| Audit Readiness | Assembles a complete audit pack — control mappings, evidence index, gap plan — for each framework you select. Charged per framework. | Growth, Enterprise, Sovereign |
Plans
Four plans, scoped by where you are in your compliance programme. Every plan is quoted to your organisation — see what each includes.
| Plan | For | Frameworks |
|---|---|---|
| Foundation | First compliance programme | Up to 2 |
| Growth ★ | Scaling toward certification | Up to 5 |
| Enterprise | Known requirements, at scale | Unlimited |
| Sovereign | Governments and global enterprises | Unlimited |
Workspaces with no agent activity for 9 consecutive months are deleted along with their data — running any agent resets the clock.
Frameworks covered
Agents map findings, controls, and audit packs to the frameworks that matter across the GCC and beyond.
Data & security
Tenant data stays in-region (KSA / UAE) on the primary path, each workspace is isolated, and every action is audit-logged. The full detail — encryption, access controls, sub-processors, and our own certification status — lives on the security page.
How we treat your data →FAQ
Is there a free trial?
There's no self-serve trial. Tell us about your organisation and we'll scope a plan and activate a workspace for you.
How is it priced?
Four plans by use case, quoted per organisation as an annual subscription. Talk to us and we'll recommend the one that fits.
What does Advisory Chat cost?
Nothing extra — it's included and unlimited on every plan, in English and Arabic.
What happens if a run fails?
A run that fails for an infrastructure reason does not count against your plan's usage — you're never charged for our error.
Can I run an audit against more than one framework at once?
Yes. Select multiple frameworks in Audit Readiness; each is assessed separately and merged into one pack, within your plan's framework limit.
Stuck, or not sure how to use the workspace?
We'll walk you through setup, your first agent run, and picking the right framework — for free. No pitch, no commitment.