Royal Commission for Riyadh City · Metro & Bus Network

Resemble CyberWatch

An AI analyst on top of your existing SIEM. It watches IT and OT events around the clock, connects them to stations, trains and buses, and escalates to the right person.
Agent monitoring · 0 open critical
Riyadh --:--:--
Events ingested today4,213,880from IBM QRadar and 9 OT sensors
SIEM alerts18,437rules fired by the SIEM
Closed by the agent18,39199.75% benign, each with a written reason
Incidents opened4correlated across IT and OT
Analyst effort avoided61 hat 12 s per alert triaged

Network status

Schematic, not to scale · simulated assets

OT and IT asset coverage

What the agent understands, by asset class

Live event stream

Normalized from IBM QRadar · agent verdict on every alert

Incidents

Click an incident for the agent's analysis

Incident analysis

Escalation ladder

Demo timing is compressed: 5 minutes plays as 6 seconds

SIEM connectors

Works with the SIEM you already run. Pick one to see how the agent reads it.
Connection

        
Same event, normalized to one schema

      

      
Read-only by design. The agent pulls alerts and context from the SIEM and OT sensors. It never writes to train control, power or SCADA systems. Every containment step needs a named person's approval.