Last Updated: August 17, 2025

Important Notice

Sabry Cybersecurity Services operates ZeroPhish, a legitimate cybersecurity awareness training platform that provides authorized phishing simulation services to contracted corporate clients only.

Service Overview

What We Do

  • Authorized Phishing Simulations: We conduct simulated phishing campaigns exclusively for organizations that have contracted our services
  • Employee Security Training: Our platform provides cybersecurity awareness education through controlled, safe environments
  • Policy Management: We help organizations implement and manage cybersecurity policies
  • Learning Management System (LMS): We deliver structured cybersecurity training programs

What We Don’t Do

  • We DO NOT conduct unauthorized phishing attacks
  • We DO NOT target individuals or organizations without explicit written contracts
  • We DO NOT engage in any malicious cybercriminal activities
  • We DO NOT store sensitive personal information from simulation participants

Authorized SMTP Domains

The following domains are used exclusively for legitimate phishing simulation exercises for our contracted clients:

Primary Simulation Domains

  • sa-secured.com
  • sa-services.top
  • sa-rewards.fun
  • riyadhseazon.com

This list is updated regularly. For the most current list, please contact us at security@sabry.sa

Data Collection and Privacy

What We Collect

  • Click tracking data for training purposes only
  • Email interaction metrics (open rates, click rates)
  • Training completion status
  • Basic interaction timestamps

What We DON’T Collect

  • No password capture: Our simulation landing pages do not store any passwords entered
  • No personal information storage: Input fields are for simulation purposes only
  • No sensitive data: We do not collect or store any sensitive personal or financial information
  • No unauthorized data: We only collect data explicitly authorized by our client contracts

Technical Implementation

  • All input forms on simulation landing pages use JavaScript event listeners that only track clicks
  • No form data is transmitted to our servers
  • Users are immediately redirected to educational content after interaction
  • All data collection complies with Saudi Arabia PDPL and international privacy standards

Client Verification

For IT Security Teams

If you need to verify the legitimacy of our simulation campaigns:

Contact Information:

  • Email: security@sabry.sa
  • Phone: +966-508121200

Required Information for Verification:

  • Campaign ID (found in email headers)
  • Receiving organization name
  • Date and time of email received
  • Sender domain

For Email Security Vendors

We maintain partnerships with major email security providers and can provide:

  • Domain verification records
  • Campaign authentication certificates
  • Client authorization documentation
  • Technical integration details

Regulatory Compliance

Saudi Arabia Compliance

  • Licensed under Saudi Arabia cybersecurity regulations
  • Compliant with National Cybersecurity Authority (NCA) guidelines
  • Registered with Saudi Data & AI Authority (SDAIA)
  • Adheres to Saudi Arabia Personal Data Protection Law (PDPL)

International Standards

  • ISO 27001 certified processes
  • GDPR compliant data handling (where applicable)
  • SOC 2 Type II controls implementation
  • Industry best practices adherence

Authorized Client Verification

Current Client Sectors

We provide services exclusively to:

  • Government entities
  • Financial institutions
  • Healthcare organizations
  • Educational institutions
  • Private corporations with security contracts

Contract Requirements

All our phishing simulation services require:

  • Signed service agreements
  • Clear scope of authorized testing
  • Employee notification protocols
  • Defined simulation parameters
  • Data handling agreements

Incident Response

If You Receive Suspicious Communication

If you believe you’ve received an unauthorized email from our domains:

  1. Do not click any links
  2. Contact us immediately at security@sabry.sa
  3. Forward the email to abuse@sabry.sa
  4. Include full email headers in your report

For False Positives

If our legitimate simulations are being blocked:

  • Contact whitelist@sabry.sa
  • Provide your email security vendor details
  • We’ll work with your team for proper configuration

Educational Resources

For Organizations

  • Free cybersecurity assessment tools
  • Best practices guides
  • Policy templates
  • Training materials

For Individuals

  • Phishing identification guides
  • Security awareness tips
  • Incident reporting procedures

Contact Information

General Inquiries

Email: info@sabry.sa
Phone: +966-508121200

Security Verification

Email: security@sabry.sa
Emergency: +966-508121200

Abuse Reports

Email: abuse@sabry.sa

Business Address

6550 Digital City, Riyadh
Unit 8 12382-3711, Al Nakheel District
Kingdom of Saudi Arabia

Legal Notice

This disclaimer serves as official notice of our legitimate cybersecurity training operations. Any misuse of our service descriptions or domain names for unauthorized activities is strictly prohibited and will be prosecuted to the full extent of the law.

Trademark Notice

ZeroPhish, Sabry, and associated logos are trademarks of Sabry Cybersecurity Services.

For immediate verification of any phishing simulation campaign, contact our 24/7 security hotline: +966-508121200

© 2025 Sabry Cybersecurity Services. All Rights Reserved.