The Human Risk Management Platform Built in the UAE, for the GCC

Fraus measures how exposed each of your employees is to phishing, impersonation and social engineering, then lowers that risk automatically. In Arabic and English, on infrastructure you control.

Let’s Connect

See the UAE regulation map

Built in Dubai for GCC organizations

Phishing simulation, training and risk scoring that meet UAE expectations for compliance, language and data residency.

Ready for UAE requirements:

UAE IA compliant

ISO/IEC 27001 certified

NIST CSF aligned

Arabic and English

Cloud or on-premise

Demo in under 1 hour

Headquartered in Dubai

Why human risk looks different in the UAE

The attack volume is national-scale, the workforce is multilingual, and the regulatory bar keeps rising. Generic, English-only awareness programs were not built for any of that.

600K

Cyberattacks a day the UAE reports facing

UAE Cyber Security Council, August 2026

200

Nationalities living and working in the UAE, each reading a phishing email in their own way

UAE government

2031

Horizon of the UAE National Cybersecurity Strategy, which plans a baseline cybersecurity standard for every industry

UAE Cyber Security Council

UAE regulation, mapped to the human layer

Every major UAE framework expects organizations to train their people and to prove it works. Here is what each one asks for, and how Fraus covers it.

Regulation

What it expects from your people

How Fraus covers it

UAE Information Assurance Regulation

Federal · Government and critical sectors

A dedicated awareness and training control family, alongside human resources security controls.

Codex

Whitebait

Odin

Arabic and English training, tested and recorded per employee. Fraus itself is UAE IA compliant.

DESC Information Security Regulation v3.1

Dubai · Government entities

Security awareness throughout employment, not only at onboarding.

Codex

Graybait

Continuous simulations and training replace the one-off induction course.

ADHICS

Abu Dhabi · Healthcare, Department of Health

Awareness campaigns on a yearly schedule, effectiveness evaluated and training records kept. The standard names phishing and social engineering as threats to staff.

Whitebait

Odin

Scheduled campaigns, effectiveness measured by department and audit-ready logs.

DFSA cyber risk management rules

DIFC · Financial services

Since January 2024, DFSA-authorized firms must maintain a comprehensive cybersecurity training program.

Codex

Blackbait

Role-based training, plus targeted tests of finance teams and executives.

UAE PDPL, Federal Decree-Law No. 45 of 2021

Federal · Personal data

Technical and organizational measures that protect personal data from breach and unauthorized processing.

Odin

Reduces the human route to a breach. On-premise deployment keeps platform data in your environment.

UAE National Cybersecurity Strategy 2025–2031

National · All sectors

Plans a baseline cybersecurity standard for every industry.

Odin

Measurable human-layer evidence, in place before the baseline reaches your sector.

Built for how UAE organizations actually work

Whitebait

Codex

Arabic and English, natively

Run Whitebait campaigns and Codex training in Arabic and English, so every employee is tested and trained in the language they work in.

Spot the fake invoice

اكتشف الفاتورة المزيفة

Fraus Platform

On-premise, in-country

Run Fraus entirely inside your own infrastructure when platform data must stay in-country and under your control.

Teams App

Inside Microsoft Teams

Employees see their risk grade, report suspicious messages in one tap and finish training without leaving Teams.

Dolus AI Studio

Real lures, rebuilt fast

Upload a screenshot of a phishing email your team just caught, and Dolus AI Studio rebuilds it as an editable simulation template.

Blackbait

Executives, tested properly

Blackbait uses OSINT and agentic AI to run escalating, targeted attacks against the people real attackers would pick first.

From first scan to lower risk, without manual effort

Set the rules once. Fraus measures, tests, teaches and acts for every employee, continuously.

←

Measure

Odin

Scores every employee continuously from behavior, role criticality and susceptibility.

Test

Whitebait

Graybait

Blackbait

Picks each person's next simulation across phishing, MFA, QR and targeted attacks.

Teach

Codex

Teams App

Delivers micro-learning within minutes of a risky action, in Arabic or English.

Act

Agentic Automation Rules

Assigns training, applies controls and escalates critical changes automatically.

Human risk management for every UAE sector

See how Fraus applies to the regulators, threats and workforces in your sector.

Questions UAE security leaders ask

What is a human risk management platform?

A human risk management platform measures how likely each employee is to fall for phishing, impersonation or social engineering, then reduces that risk with targeted simulations, training and controls. Unlike annual awareness training, it runs continuously and gives each person a risk score you can track.

How is human risk management different from security awareness training?

Security awareness training gives everyone the same content and measures completion. Human risk management treats training as one tool among several: it tests each person, measures behavior, and responds automatically when someone's risk rises.

Does Fraus support Arabic?

Yes. Whitebait phishing simulations and Codex training run in both Arabic and English, so employees are tested and trained in the language they work in.

Can Fraus keep our data in the UAE?

Yes. Fraus can run fully on-premise, inside your own infrastructure, for organizations that need platform data to stay in-country and under their control.

Which UAE regulations does Fraus help with?

Fraus helps you produce awareness and training evidence for the UAE IA Regulation, DESC ISR, ADHICS, the DFSA cyber risk management rules and the UAE PDPL. Fraus itself is ISO/IEC 27001 certified and UAE IA compliant.

Is Fraus a UAE company?

Yes. Fraus was founded in Dubai in 2024 and works with organizations across the UAE and the wider GCC.

The Human Risk Management Platform Built in the UAE, for the GCC

Built in Dubai for GCC organizations

Why human risk looks different in the UAE

UAE regulation, mapped to the human layer

Built for how UAE organizations actually work

Arabic and English, natively

On-premise, in-country

Inside Microsoft Teams

Real lures, rebuilt fast

Executives, tested properly

From first scan to lower risk, without manual effort

Measure

Test

Teach

Act

Human risk management for every UAE sector

Questions UAE security leaders ask

What is a human risk management platform?

How is human risk management different from security awareness training?

Does Fraus support Arabic?

Can Fraus keep our data in the UAE?

Which UAE regulations does Fraus help with?

Is Fraus a UAE company?

See Human Risk Clearly. Reduce It Continuously.

Human Risk Management