Saudi Arabia’s cybersecurity market reached SAR 16.3 billion ($4.3 billion) in 2025, recording a compound annual growth rate of 10.7% over the past three years, according to a new report by the National Cybersecurity Authority (NCA).
Government spending on cybersecurity products and services totaled SAR 5.1 billion, accounting for 31% of the market, while private sector expenditure reached SAR 11.2 billion, representing 69%.
The figures were released in the NCA’s report, Key Economic Indicators in Saudi Arabia’s Cybersecurity Sector 2026, which examines market size, the sector’s contribution to gross domestic product, workforce trends and other measures of growth.
Contribution to GDP
The cybersecurity sector contributed approximately SAR 20 billion to Saudi Arabia’s GDP at current prices in 2025, registering a compound annual growth rate of 13.2%, the authority reported.
Of that amount, SAR 9.7 billion represented the direct contribution of cybersecurity products and service providers, while indirect contributions totaled SAR 10.3 billion.
The sector accounted for 0.42% of the Kingdom’s overall GDP and 0.71% of non-oil GDP.
The cybersecurity workforce exceeded 22,000 specialists last year, reflecting a compound annual growth rate of 5.9%.
The report linked this expansion to specialized training initiatives and programs designed to meet the needs of vital sectors and support economic and social development.
Women accounted for 33% of cybersecurity professionals in Saudi Arabia, surpassing the global participation rate of approximately 22%.
Spending on products and services
Cybersecurity products accounted for 51% of total market spending, valued at SAR 8.3 billion, while services represented 49%, or SAR 7.9 billion.
The report identified key areas of spending, including endpoint security and management, cybersecurity systems integration, network security, data security and security operations solutions.
Public-private cooperation
The NCA highlighted efforts to strengthen competitiveness, encourage investment and innovation, and promote cooperation between the public and private sectors as key drivers of market growth.
The study classified cybersecurity offerings into 100 products and services, drawing on internationally recognized methodologies, standards and practices.
The NCA is Saudi Arabia’s designated cybersecurity authority and national reference body, tasked with protecting the Kingdom’s vital interests, national security, critical infrastructure, priority sectors, and government services and activities.
Its responsibilities also include stimulating industry growth, promoting innovation and investment, conducting research and development, and issuing periodic reports on cybersecurity at the national and sectoral levels.

