🏨
Hospitality (Hotels, Cafés, Co-Working)
Captive portal with SMS/voucher auth, per-guest bandwidth quotas, daily session resets, content filtering, and PCI-DSS-aware payment-page isolation.
- QoS template: "Hotel" - VoIP & streaming priority
- Auto-isolated guest VLAN with internet-only access
- Arabic + English captive portal
- VLAN-segregated POS network
🏥
Healthcare (Hospitals, Clinics)
Segmentation between EMR systems, IoT medical devices, and guest WiFi. HIPAA-equivalent controls, encrypted backups, and DLP for patient data.
- Posture checks for clinical workstations
- OT/SCADA module for biomedical equipment
- Audit-ready compliance reports
- Tamper-evident session recording (PAM)
🏭
Manufacturing & Industrial
Purdue-model enforcement for ICS/SCADA. Strict L2-L3 segmentation, read-only OT inspection, and air-gapped recovery options.
- Modbus, DNP3, IEC-61850, OPC UA inspection
- QoS template: "Manufacturing" - priority for control loops
- Physical isolation enforced via dedicated NICs
- NCA-OT and IEC-62443 reporting
🏦
Banking & Financial Services
SAMA, NCA-ECC, and PCI-DSS coverage out of the box. Tier-1 DDoS protection, full session recording for privileged access, and DLP for SWIFT/payment messages.
- Hardware MFA enforcement (WebAuthn)
- Encrypted vault for cardholder data scope
- Real-time SOC integration via SIEM/XDR
- Quarterly BAS attack simulation reports
🏛️
Government & Public Sector
NCA-ECC compliance, sovereign data handling, Arabic-first UI for staff, and air-gap deployment options for classified networks.
- Full Arabic admin UI (RTL native)
- On-prem deployment - no cloud dependency
- NCA-ECC, SAMA, PDPL evidence collection
- Hardware-bound license - no phone-home
🛒
Retail (Stores, Malls)
Centrally manage 100s of branch firewalls. POS network isolation, guest WiFi, store-to-HQ VPN backbone, and per-branch usage reports.
- Cloud Manager for fleet operations
- Auto-failover Multi-WAN (4G backup)
- Branch-to-HQ WireGuard mesh
- White-label option for franchise chains
🎓
Education (Schools, Universities)
Age-appropriate web filtering, BYOD posture checks, exam-mode lockdown, and SSO with SIS systems.
- Web Filter with curriculum-aware allowlists
- QoS template: "Office" with study-time priority
- Self-service portal for student requests
- SAML/OIDC integration with Microsoft 365 EDU
📡
MSP & Managed Services
Manage hundreds of customer firewalls from one tenant-isolated console. Bulk policy push, per-customer health, billing roll-up.
- Multi-tenant Cloud Manager
- Per-customer RBAC and audit log
- Reseller-friendly white-label
- API + webhooks for PSA integration
🏢
SMB & Mid-Market
Replace 8+ point products (firewall, EDR, SIEM, VPN, AV gateway, web filter, threat intel, backup) with a single appliance.
- One IBM x3250 M5 / equivalent for <250 users
- One config, one console, one bill
- 3-tier pricing matches business size
- 30-day free trial - full feature unlock