Merqab watches the shifting landscape of your digital ecosystem—revealing the signals, relationships and changes that deserve your attention.
THIRD-PARTY RISK SIGNALS
MERQAB keeps scanning what anyone on the internet can see, and pairs it with what the vendor tells you through their own portal. The overall score is the balance of both.
Continuous external scanning of the vendor's domains, certificates, services and known vulnerabilities.
Questionnaires, evidence and certifications the vendor submits through their own portal.
Every vendor has a tier, from T1 (critical to your operations) to T4 (low impact). Each tier has its own horizon. When a vendor's score falls below it, MERQAB moves that vendor to act now. Drag the score to see it.
Vendors drift inward as their risk rises. You see who is about to cross before they do.
MERQAB comes from years of offensive security work. It looks at each vendor the way an attacker would: what is exposed, what is reachable, and where it leads.
Other discovered assets
Choose any point on the map to see why it is—or is not—part of the reachable route.
Research and practical guidance for understanding third-party exposure and deciding what deserves attention next.
View all intelligence
ComplianceExplore Saudi Arabia’s Critical Systems Cybersecurity Controls (CSCC–1:2019), a national mandate by the NCA designed to safeguard critical infrastructure through advanced, risk-based cybersecurity requirements aligned with Vision 2030.
ComplianceDiscover how the Saudi Cybersecurity Workforce Framework (SCyWF) is shaping the Kingdom’s cybersecurity landscape by defining clear roles, skill requirements, and structured pathways to build a resilient, future-ready cybersecurity workforce aligned with Vision 2030.
ComplianceLearn about Saudi Arabia’s NCA Essential Cybersecurity Controls (ECC), a structured framework helping organizations strengthen cybersecurity, ensure compliance, and manage cyber risks effectively.
