Website and data protection
- Traffic to crux.sa is served over HTTPS.
- Contact form submissions are validated on the server and protected against automated abuse with Google reCAPTCHA.
- We collect the minimum personal data needed, as described in our Privacy Policy.
Access control
- Access to systems holding personal or client data is limited to personnel who need it.
- Credentials are kept out of public code and access is reviewed regularly.
Secure engineering
We apply secure development practices: input validation, dependency updates and least-privilege configuration. Our approach to client engagements follows the regulatory frameworks that matter in the Kingdom, including SAMA and NCA requirements and the PDPL, as set out in our Cybersecurity, Risk & AI Governance services.
Incident response
We investigate suspected security incidents promptly, contain and remediate them, and notify affected parties and authorities where the law requires.
Responsible disclosure
If you believe you have found a vulnerability on crux.sa, please email contact@crux.sa with the details and steps to reproduce. Please give us reasonable time to fix the issue before disclosing it publicly, and do not access or modify data that is not yours.
Contact
Questions about this page? Email contact@crux.sa or use our contact form.