Ministries and government bodies
Many cannot use security services hosted abroad. Detection data stays in Oman.
TRENDAI · VISION ONE SPC
Sovereign XDR, operated in Oman by TITECH.
TrendAI Vision One™ for Sovereign and Private Cloud (SPC) is hosted at Oman Data Park and operated by TITECH. Security data stays in Oman.
- Hosted in Oman, at Oman Data Park
- Designed to align with PDPL, ISO 27001
- Operated by TITECH’s security team
Built for data that must stay in Oman.
Oman’s Personal Data Protection Law (PDPL, Royal Decree No. 6/2022) and sector rules control where sensitive data is stored, processed and transferred. Many ministries and government entities cannot use security services hosted abroad. Vision One SPC serves them in Oman, supporting Oman Vision 2040.
The gap: why Oman needed a sovereign XDR platform
Seven questions security teams in Oman ask, and how a platform hosted in Oman answers each one.
How can you stay aligned with PDPL and sovereignty rules if security telemetry leaves Oman?
Vision One SPC is hosted at Oman Data Park, so telemetry stays in Oman. It is designed to align with PDPL, ISO 27001, NIST CSF and GCC frameworks.
How effective is security when disconnected tools each cover a small layer?
One platform covers endpoints, servers and the network, with detection, investigation and response in one place.
What happens when detection comes after the damage is done?
Intelligence-driven detection correlates XDR storylines, machine learning and sandbox results, so threats surface earlier.
How can teams keep up with modern threats using manual updates and outdated signatures?
Automated threat-intelligence feeds keep the platform current inside Oman, and detections map to MITRE ATT&CK.
How can analysts investigate well when every incident means switching between consoles?
One investigation console brings automated playbooks, correlated storylines and case management together, so response is faster.
How sustainable is it to run many overlapping tools, each with its own cost and training?
One sovereign platform consolidates tools, so there is less to license, operate and train on.
How does a SOC mature when it is limited to basic monitoring?
It moves from monitoring to full cyber defense, with threat hunting, incident response and forensics on top of sovereign XDR.
OUR TECHNOLOGY ECOSYSTEM
Five layers working as one platform.
TrendAI (formerly Trend Micro’s enterprise business) builds the Vision One platform. TITECH runs it in Oman.
Protection: EPP and EDR
Endpoint and server protection with detection and response, managed from multi-tenant consoles.
- Anti-malware protection
- Host intrusion prevention
- Virtual patching
- Host-based firewall
- File integrity monitoring
- Device and application control
- Machine learning
Network detection (NDR)
Network analytics and intrusion prevention cover assets that have no agent, and widen visibility.
- Network analytics
- Network intrusion prevention (NGIPS)
- Deep Discovery Inspector
XDR and SOC console
One place to detect, investigate and respond: detection models, dashboards, playbooks and cases.
- Threat detection models
- Security dashboard
- MITRE ATT&CK mapping
- Threat hunting
- Automated and custom playbooks
- Case management
Threat intelligence and sandbox
Third-party threat intelligence and sandbox analysis, backed by global threat research.
- Third-party threat intelligence
- Sandbox analysis
- Automatic and manual submission
- Smart Protection Network
- Zero Day Initiative
Core services
An open API, AI and machine learning, and big-data analytics sit under every layer.
- Open API
- AI and machine learning
- Big-data analytics
How separate signals become one threat story.
Many small signals
Attacks rarely raise one clear alert. They appear as many small, low-confidence signals that mean little alone and a lot together.
Correlate across layers
The platform links them with threat intelligence and sandbox results across endpoints, networks and servers, including assets with no agent.
One threat story
Seemingly unrelated events become a single storyline. More detection layers mean earlier mitigation.
How the platform runs in Oman.
One central platform at Oman Data Park serves many customer tenants. Sensors in each tenant protect it and send telemetry to the platform.
At Oman Data Park: the central console, XDR instances, data lake, multi-tenant endpoint and server consoles, and the sandbox.
In each customer tenant: sensors protect the environment and upload telemetry to the XDR platform.
WHAT WE DELIVER
Services TITECH delivers on the platform
Managed detection and response
Continuous monitoring, investigation and response by TITECH’s security operations team, delivered on the platform.
Forensics and incident response (DFIR)
Digital forensics and incident response to establish what happened, how far it spread and what to fix.
Threat hunting
Analysts search your telemetry for threats that alerts miss, using MITRE ATT&CK mapping and the platform’s data.
NIST CSF-aligned operations
Services are organized around the NIST Cybersecurity Framework: protect, detect and respond, plus predictive analytics.
What TITECH takes on for you
Design and onboarding
We design the service around your environment, onboard all assets and define the use cases.
Platform and technology
TITECH provides the entire security platform: detection, correlation, investigation and response.
Threat-intelligence integration
We integrate your workflows with threat intelligence, complementing the curated intelligence built into XDR.
Reduced operational burden
Our security operations team monitors, investigates and responds to incidents, reducing noise and escalating what matters.
Visibility and reporting
Dashboards, reports and service reviews give continuous visibility, aligned with the service levels we agree.
What research finds for organizations using XDR
Half
as many successful attacks over 12 months
2.2×
more likely to detect a breach or attack within a few days
60%
less likely to report attack re-propagation as an issue
Up to 79%
lower security costs
70%
improvement in response time
Figures published by Trend Micro from research on organizations using its XDR.
A platform, not a collection of tools.
Vision One SPC runs on Red Hat OpenShift, with Dell PowerFlex as the storage infrastructure underneath.
- TrendAI Vision One
- Red Hat OpenShift
- Dell PowerFlex
Available today
Protection and EDR for endpoints and servers comes in Essentials, Pro and EDR/XDR add-on editions. Deep Discovery Inspector adds network detection, and a TippingPoint integration is available.
SECTORS WE SERVE
Where data has to stay in Oman.
Banking and finance
Sector rules control where sensitive data is stored and moves. Security telemetry stays in Oman.
Telecom operators
Sector rules cover how telecom data is handled and transferred. Telemetry stays in Oman.
Energy and infrastructure
Critical operations get detection and response with telemetry kept in Oman.
BEFORE WE BEGIN
Your questions, answered.
Where is our security data hosted?
At Oman Data Park, in Oman. TITECH operates the platform on its own in-country infrastructure, so telemetry and investigation data stay in Oman.
How does Vision One SPC relate to the PDPL?
It is designed to align with PDPL (Royal Decree No. 6/2022), ISO 27001, NIST CSF and GCC frameworks. Your legal team decides what applies to you. TITECH itself holds ISO/IEC 27001 certification.
What about assets that have no agent?
Not every asset has an agent installed. Network sensors widen visibility, and the platform correlates what they see with endpoint and server telemetry for broader context.
Can TITECH run it for us?
Yes. TITECH’s security operations team can monitor, investigate and respond for you, with managed detection and response (MDR), digital forensics and incident response, and threat hunting.
Which editions are available?
Protection and EDR for endpoints and servers comes in Essentials, Pro and EDR/XDR add-on editions. Scope is agreed during design and onboarding.
How is this different from cloud-hosted XDR?
With cloud-hosted XDR, telemetry goes to the provider’s cloud, which may be outside Oman. Vision One SPC runs at Oman Data Park, so telemetry and investigation data stay in Oman.
YOUR NEXT CHAPTER
Keep your security data in Oman.
Tell us about your environment and data requirements. We will shape the onboarding and the service around them.
Plan a sovereign deploymentTalk to our team in Oman.
Call us
+968 2246 4000Email us
info@titech.omOffice 11, First Floor, Super Plaza, Azaiba, Muscat.