Diriyah Company Boosts Cyber Defenses with New MoU

Diriyah Company has signed a memorandum of understanding with the Saudi Federation for Cybersecurity, Programming and Drones to protect the digital infrastructure of Diriyah, one of the Kingdom’s most historically significant cities, in a move announced by the Saudi Press Agency on December 22, 2024. The agreement positions the developer behind the Diriyah giga-project at the forefront of a national effort to harden Saudi Arabia’s digital assets, pairing one of the country’s most ambitious cultural and tourism destinations with its leading cybersecurity authority. What does it mean when a heritage city built on centuries of history becomes a testing ground for the most advanced digital defenses available?

The MoU commits Diriyah Company to joining the BugBounty platform, described as the first of its kind in the Middle East. The platform harnesses the skills of independent cybersecurity researchers to uncover software vulnerabilities before malicious actors can exploit them, strengthening trust in the digital services used by public and private sector clients. For Diriyah, the partnership extends beyond technology into human capital: the Saudi Federation for Cybersecurity, Programming and Drones will deliver specialized training, share data on top-performing students holding professional certifications, and help design assessments tailored to cybersecurity roles at the company. The agreement reflects the Kingdom’s broader conviction that digital resilience is inseparable from cultural and economic ambition.

Context and Background

Why has cybersecurity become a defining priority for a country investing so heavily in tourism, entertainment and smart urban development? Diriyah sits at the heart of that question. The historic town, a UNESCO World Heritage site and the ancestral home of the Al Saud family, is being transformed into a global destination for culture, hospitality, retail and residence under the stewardship of Diriyah Company, which operates as the developer of the Diriyah giga-project. As the site adds digital ticketing, smart building systems, visitor applications and connected infrastructure, the surface available to cyber threats grows in parallel. The MoU responds directly to that expanding footprint.

The Saudi Federation for Cybersecurity, Programming and Drones is the national body mandated to build domestic capability in three interlinked fields: protecting networks and data, developing advanced programming skills, and advancing drone technology. Its BugBounty platform represents a practical expression of that mandate, creating a structured, ethical channel through which security researchers can report weaknesses and be recognized for their contributions. For Diriyah Company, joining the platform signals that the developer intends to treat security as a design principle rather than an afterthought. The timing, announced in the final weeks of 2024, places the agreement within a period of intense delivery across the Diriyah project and across the Kingdom’s wider digital transformation.

The partnership also reflects a pattern visible across Saudi Arabia’s public and private sectors, where institutions increasingly coordinate with specialized national bodies rather than working in isolation. By aligning with the federation, Diriyah Company gains access to a community of practitioners, a pipeline of trained talent, and a shared methodology for identifying and mitigating risk. That combination matters as the Kingdom hosts major international events, welcomes millions of visitors, and expands the digital services that underpin everyday life.

Key Details of the Agreement

What specifically does the MoU deliver for Diriyah Company and for the cybersecurity professionals who will work alongside it? Under the terms announced by the Saudi Press Agency, the two organizations will collaborate on joint cybersecurity projects and on measures to identify and mitigate potential security risks, with the goal of ensuring a secure and resilient digital environment. The BugBounty platform sits at the center of this effort, offering a first-of-its-kind regional mechanism for channeling researcher expertise into the protection of live systems. The federation will also provide specialized training programs designed to raise awareness of cybersecurity and upgrade employee skills in what the announcement described as a critical field.

The human capital dimension is equally concrete. The MoU enables Diriyah Company to access the federation’s database of professionals, helping the developer identify suitable candidates for employment and strengthen its internal cyber capabilities. It further facilitates the design of assessments tailored to the requirements and roles of vacant cybersecurity positions, allowing the company to evaluate the competency levels of potential candidates with precision. In addition, the agreement promotes collaboration in sharing data on outstanding students who hold specific professional certifications in cybersecurity, with the aim of attracting them to available training opportunities. Together, these provisions create a structured pathway from education and certification into meaningful employment on one of the Kingdom’s flagship projects.

Jerry Inzerillo, Group CEO of Diriyah Company, framed the partnership in strategic terms. “This MoU aligns with Diriyah’s commitment to realizing Saudi Vision 2030, marking a crucial step toward creating a secure and sustainable digital future for Diriyah,” he said. “Our collaboration with government and private sectors, especially the Saudi Federation for Cybersecurity, Programming, and Drones, is essential for empowering the next generation in advanced technology, driving cultural and economic growth.” The statement places the agreement squarely within the company’s long-term vision, linking digital protection to the wider goals of cultural development and economic diversification.

The two organizations will also collaborate on conferences, workshops and public awareness initiatives, extending the partnership beyond internal systems into the broader community. That outward-facing component matters because cybersecurity depends as much on informed people as on robust technology. By co-hosting events and campaigns, Diriyah Company and the federation can help normalize good digital practice among employees, partners, visitors and young Saudis considering careers in the field.

International and Regional Impact

How does a single memorandum of understanding between a Saudi developer and a national federation resonate beyond the Kingdom’s borders? The BugBounty platform’s regional first status gives the agreement a significance that extends across the Middle East. Countries throughout the region are digitizing government services, tourism infrastructure and financial systems at speed, and all of them face the same fundamental challenge: finding vulnerabilities before adversaries do. A platform that formalizes ethical researcher participation, backed by a national authority and applied to a high-profile destination, offers a model that regional peers can study and potentially replicate.

For international partners, the message is one of reliability. Global investors, hotel operators, entertainment brands and technology vendors involved in Diriyah’s development depend on secure systems to protect customer data, intellectual property and operational continuity. An agreement that explicitly targets risk identification, workforce competency and continuous training strengthens confidence among those partners. It also reinforces Saudi Arabia’s reputation as a serious participant in global cybersecurity conversations, a positioning that matters as the Kingdom chairs or participates in international forums on digital governance and cross-border data protection.

The collaboration carries cultural weight as well. Diriyah is not simply a construction site; it is a place where visitors from around the world will encounter Saudi heritage, and where digital services will mediate much of that experience. Protecting those services protects the visitor experience itself, from ticketing and wayfinding to payments and personalized content. In that sense, cybersecurity becomes part of cultural diplomacy, ensuring that the Kingdom’s hospitality is matched by dependable, trustworthy technology.

Economic and Strategic Significance

Why should businesses and analysts outside Saudi Arabia pay attention to a cybersecurity agreement tied to one development? The answer lies in the scale and ambition of what Diriyah represents. As one of the Kingdom’s giga-projects, it is designed to attract international visitors, global brands and long-term investment, and its digital layer will support everything from smart buildings to data-driven visitor services. Security incidents at a destination of this profile would carry reputational and financial costs that extend well beyond the site itself. Investing in prevention, therefore, is an economic decision as much as a technical one.

The agreement also strengthens the local cybersecurity labor market. By connecting Diriyah Company to a database of certified professionals and outstanding students, the MoU helps match trained talent with real opportunities, reducing the gap between education and employment. That alignment supports the growth of a domestic knowledge economy in which skilled Saudis contribute to national projects rather than seeking opportunities abroad. Over time, the assessments, training programs and awareness initiatives described in the agreement can become a repeatable template for other large employers seeking to build internal security teams.

Strategically, the partnership reflects a broader recognition that digital infrastructure is critical infrastructure. As Saudi Arabia pursues economic diversification, the reliability of its digital systems underpins sectors from tourism and entertainment to finance and logistics. An agreement that brings together a major developer and the national cybersecurity federation demonstrates how public-private coordination can operationalize that principle, turning high-level policy into practical protections on the ground.

Vision 2030 Alignment

How does protecting a historic city connect to a national transformation plan focused on the future? Saudi Vision 2030 rests on diversifying the economy, empowering citizens, and building world-class infrastructure, and none of those goals can be achieved without secure digital foundations. Diriyah Company’s MoU with the Saudi Federation for Cybersecurity, Programming and Drones advances all three: it protects an economic asset of national importance, creates pathways for young Saudis into advanced technology careers, and reinforces the trustworthy digital environment that investors and visitors expect. The agreement is a practical expression of the vision’s insistence that tradition and modernity can reinforce one another.

Looking ahead, the partnership positions Diriyah to grow as a secure, connected destination while contributing to the Kingdom’s wider cyber resilience. The joint projects, conferences and workshops envisaged in the MoU will keep the collaboration active rather than ceremonial, and the talent pipeline it creates will feed not only Diriyah Company but the broader ecosystem of Saudi institutions working on digital protection. For a project rooted in centuries of history, that forward-looking commitment ensures the next chapter of Diriyah will be written on foundations as durable in the digital realm as they are in stone.

20 Questions

Q1. What did Diriyah Company sign and with whom?

A1. Diriyah Company signed a memorandum of understanding with the Saudi Federation for Cybersecurity, Programming and Drones to safeguard Diriyah’s digital infrastructure and enhance its overarching cybersecurity measures, as announced by the Saudi Press Agency on December 22, 2024.

Q2. What is the BugBounty platform mentioned in the agreement?

A2. The BugBounty platform is described as the first of its kind in the Middle East. It leverages the expertise of cybersecurity researchers to identify software vulnerabilities, contributing to a more secure and trustworthy cyberspace for private and public sector clients.

Q3. Why is Diriyah significant to Saudi Arabia?

A3. Diriyah is one of Saudi Arabia’s most historically significant cities, a UNESCO World Heritage site and the ancestral home of the Al Saud family. It is being developed into a major cultural, tourism and residential destination under Diriyah Company.

Q4. What training will the federation provide?

A4. The Saudi Federation for Cybersecurity, Programming and Drones will provide specialized training programs to raise awareness about the importance of cybersecurity and to upgrade employees’ skills in this critical field, according to the announcement.

Q5. How does the MoU help Diriyah Company recruit talent?

A5. The MoU gives Diriyah Company access to the federation’s database of professionals, helping it identify suitable candidates for employment. It also supports tailored assessments for vacant cybersecurity roles and shares data on outstanding certified students.

Q6. What did Diriyah Company Group CEO Jerry Inzerillo say about the partnership?

A6. Jerry Inzerillo said the MoU aligns with Diriyah’s commitment to realizing Saudi Vision 2030 and marks a crucial step toward a secure, sustainable digital future, adding that collaboration with government and private sectors empowers the next generation in advanced technology.

Q7. What joint activities will the two organizations pursue?

A7. The two organizations will collaborate on joint cybersecurity projects, including organizing conferences, workshops and initiatives to raise public awareness about cybersecurity issues, extending the partnership beyond internal systems into the wider community.

Q8. When and where was the agreement announced?

A8. The agreement was announced by the Saudi Press Agency on December 22, 2024, with the announcement dated to Diriyah and distributed through official Saudi state media channels, reflecting the Kingdom’s transparent communication of national developments.

Q9. What is the Saudi Federation for Cybersecurity, Programming and Drones?

A9. It is the national body mandated to build Saudi capability in cybersecurity, programming and drone technology. It operates the BugBounty platform and supports training, certification and workforce development across these interconnected fields.

Q10. How does the MoU support Saudi Vision 2030?

A10. The MoU supports Vision 2030 by protecting a nationally important economic and cultural asset, creating career pathways for young Saudis in advanced technology, and reinforcing the trustworthy digital environment that investors, visitors and businesses expect.

Q11. What risk-related measures does the agreement include?

A11. The two entities will collaborate to strengthen Diriyah Company’s systems by developing measures to identify and mitigate potential security risks, ensuring a secure and resilient digital environment for the company’s expanding digital infrastructure and services.

Q12. Why does cybersecurity matter for a tourism and heritage destination?

A12. As Diriyah adds digital ticketing, smart building systems and visitor applications, the potential surface for cyber threats grows. Protecting these systems safeguards visitor data, operational continuity and the overall visitor experience at a globally significant destination.

Q13. What opportunities does the MoU create for students?

A13. The agreement promotes sharing data on outstanding students who hold specific professional certifications in cybersecurity, with the goal of attracting them to available training opportunities at Diriyah Company and building a skilled domestic workforce.

Q14. How does the agreement benefit the wider Middle East region?

A14. The BugBounty platform’s first-of-its-kind status in the Middle East offers a model for other countries digitizing government services, tourism and finance. It demonstrates how ethical researcher participation can be formalized with national backing.

Q15. What does joining the BugBounty platform mean for Diriyah Company?

A15. Joining the platform means Diriyah Company can draw on a community of cybersecurity researchers to find and fix vulnerabilities, strengthening its systems and demonstrating a proactive approach to protecting its digital assets and those of its partners.

Q16. How will employee skills be upgraded under the agreement?

A16. The federation will deliver specialized training programs focused on cybersecurity awareness and technical skills, helping Diriyah Company employees understand emerging threats and apply best practices in their daily work across the organization.

Q17. What role do assessments play in the partnership?

A17. The MoU facilitates the design of assessments tailored to the requirements and roles of vacant cybersecurity positions at Diriyah Company, allowing the company to evaluate candidates’ competency levels accurately and match the right people to the right roles.

Q18. How does the agreement reflect public-private cooperation in Saudi Arabia?

A18. The MoU brings together a major developer and a national federation, showing how Saudi Arabia’s public and private sectors coordinate on strategic priorities. Jerry Inzerillo specifically cited collaboration across both sectors as essential to empowering the next generation.

Q19. What awareness activities are planned?

A19. The two organizations will organize conferences, workshops and initiatives to raise public awareness about cybersecurity issues, helping employees, partners, visitors and young Saudis understand the importance of digital safety in everyday life.

Q20. What does the partnership mean for Diriyah’s future?

A20. The partnership positions Diriyah to grow as a secure, connected destination. By protecting its digital infrastructure and building local talent, it ensures the project’s next chapter rests on foundations as durable in the digital realm as in stone.

Reader Feedback

We value your thoughts. Please share your feedback on this article.

Name *

Message *

Your feedback helps us improve our coverage.