Saudi cybersecurity market reaches SAR16.3 billion in 2025, NCA report shows

Market Size and Growth

The report published by the National Cybersecurity Authority (NCA) titled “Key Economic Indicators in the Cybersecurity Sector 2026” stated that Saudi Arabia’s cybersecurity market reached a value of SAR16.3 billion in 2025.

It recorded a compound annual growth rate (CAGR) of 10.7 percent between 2023 and 2025.

Economic and Workforce Indicators

The report revealed that government entities’ spending on cybersecurity products and services amounted to approximately SAR5.1 billion, accounting for 31 percent of the market, while private-sector spending reached SAR11.2 billion, representing 69 percent of the Kingdom’s cybersecurity market.

The contribution of the cybersecurity sector to the Kingdom’s Gross Domestic Product (GDP) at current prices reached approximately SAR20 billion in 2025, with a CAGR of 13.2 percent between 2023 and 2025.

Of this total, cybersecurity product and service providers contributed SAR9.7 billion directly, while indirect contributions amounted to SAR10.3 billion.

These contributions account for 0.42 percent of the Kingdom’s total GDP and 0.71 percent of the GDP of non-oil activities.

Regarding the cybersecurity workforce, the report showed that the number of cybersecurity professionals in the Kingdom exceeded 22,000 in 2025, recording an approximate CAGR of 5.9 percent between 2023 and 2025.

Women accounted for 33 percent of the Kingdom’s cybersecurity workforce, exceeding the global average of approximately 22 percent.

The report further examined the breakdown of the cybersecurity market by product and service categories. Expenditure on cybersecurity products reached SAR8.3 billion, accounting for 51 percent of the market, while spending on cybersecurity services amounted to SAR7.9 billion, representing 49 percent.

Drivers, Methodology and the Role of the National Cybersecurity Authority

The report highlighted the most in-demand cybersecurity products and services, which included endpoint security and management, network security, cybersecurity operations solutions, cybersecurity system integration, and data security.

It highlighted that the growth of the cybersecurity market in the Kingdom is driven by efforts and initiatives aimed at enhancing competitiveness, encouraging investment, and fostering innovation in the cybersecurity sector, including integration between the public and private sectors to contribute to the development of the sector.

The report is a result of a comprehensive study, with inputs from stakeholders across the public and private sectors, academic institutions, and cybersecurity professionals. It leveraged a three-level classification of cybersecurity products and services across five main categories and 25 activities spanning over 100 cybersecurity products and services, in alignment with global methodologies and best practices.

The NCA is the national entity in charge of cybersecurity in Saudi Arabia and the national reference in all its affairs. It aims to enhance the Kingdom’s cybersecurity posture to safeguard its vital interests, national security, critical infrastructure, priority sectors, and government services and activities.

The NCA undertakes several key responsibilities, including promoting the growth of the cybersecurity sector within the Kingdom and establishing policies, governance mechanisms, frameworks, standards, regulations, and guidelines related to cybersecurity. These efforts are designed to cultivate a resilient, secure, and trusted Saudi cyberspace that enables growth and prosperity.