🔄 Changelog

Fixed broken navigation: the QA menu items (My Cases, Submit) that returned 404, registered the live-notifications stream route, and repointed the Email Templates and Email Monitor admin menu items to their correct pages.

Fixed broken navigation: the QA menu items (My Cases, Submit) that returned 404, registered the live-notifications stream route, and repointed the Email Templates and Email Monitor admin menu items to their correct pages.

Fixed unreadable dark table text on admin diagnostic pages. Tables now inherit the active theme colors correctly in both dark and light modes.

Fixed unreadable dark table text on admin diagnostic pages. Tables now inherit the active theme colors correctly in both dark and light modes.

Fixed page-access verification messages (such as rate-limit notices) that appeared in English on the Arabic interface. Messages now follow the active interface language.

Fixed page-access verification messages (such as rate-limit notices) that appeared in English on the Arabic interface. Messages now follow the active interface language.

A new admin tool sends real test in-app notifications and emails through the live code paths, shows the delivery method and recent activity, and audits private-message and consultant-message routing to confirm each notification reaches the correct recipient.

A new admin tool sends real test in-app notifications and emails through the live code paths, shows the delivery method and recent activity, and audits private-message and consultant-message routing to confirm each notification reaches the correct recipient.

A new enterprise console manages LinkedIn OAuth and SMS verification in one place: provider keys, editable bilingual message templates with live preview, OTP parameters, per-flow enforcement toggles, readiness diagnostics and built-in test tools.

A new enterprise console manages LinkedIn OAuth and SMS verification in one place: provider keys, editable bilingual message templates with live preview, OTP parameters, per-flow enforcement toggles, readiness diagnostics and built-in test tools.

Added phone-ownership verification via SMS one-time codes with support for multiple providers (Unifonic, Taqnyat, Twilio). Code length, expiry, resend cooldown, limits and the bilingual message template are managed from the admin panel.

Added phone-ownership verification via SMS one-time codes with support for multiple providers (Unifonic, Taqnyat, Twilio). Code length, expiry, resend cooldown, limits and the bilingual message template are managed from the admin panel.

Members can now prove ownership of their LinkedIn profile by signing in with LinkedIn (OpenID Connect). The platform checks that the account signed into matches the profile URL provided, blocks mismatches, and keeps a full verification audit trail for admins.

Members can now prove ownership of their LinkedIn profile by signing in with LinkedIn (OpenID Connect). The platform checks that the account signed into matches the profile URL provided, blocks mismatches, and keeps a full verification audit trail for admins.

Fixed a bug that stopped both in-app and email notifications for new private messages from being delivered to the recipient.

Fixed a bug that stopped both in-app and email notifications for new private messages from being delivered to the recipient.

Added member presence with Online, Away, Busy, Do-Not-Disturb and Invisible statuses, custom status text, privacy controls, automatic away detection, and presence-aware email suppression for online recipients.

Added member presence with Online, Away, Busy, Do-Not-Disturb and Invisible statuses, custom status text, privacy controls, automatic away detection, and presence-aware email suppression for online recipients.

Strengthened registration and profile forms with Arabic/English script enforcement, automatic digit normalization, and real-time phone and LinkedIn format and uniqueness checks.

Strengthened registration and profile forms with Arabic/English script enforcement, automatic digit normalization, and real-time phone and LinkedIn format and uniqueness checks.

A major upgrade to the Events module: paid event registration with MyFatoorah payment, custom registration fields, a speakers and sponsors directory, ticket tiers with promo codes and refunds, invoices and receipts with a revenue dashboard, QR tickets, and lifecycle reminders, feedback and certificates.

A major upgrade to the Events module: paid event registration with MyFatoorah payment, custom registration fields, a speakers and sponsors directory, ticket tiers with promo codes and refunds, invoices and receipts with a revenue dashboard, QR tickets, and lifecycle reminders, feedback and certificates.

Quota periods now align to each subscriber billing cycle, with configurable soft limits and overage handling instead of hard cut-offs.

Quota periods now align to each subscriber billing cycle, with configurable soft limits and overage handling instead of hard cut-offs.

Members can now see live usage meters for their plan limits on the My Subscription page, and admins get a usage dashboard with the ability to set per-account overrides.

Members can now see live usage meters for their plan limits on the My Subscription page, and admins get a usage dashboard with the ability to set per-account overrides.

Introduced a multi-phase subscription quota system that enforces per-plan usage limits and per-period resets across gated modules and action points.

Introduced a multi-phase subscription quota system that enforces per-plan usage limits and per-period resets across gated modules and action points.

Reorganized the admin navigation into 14 clearly grouped sections for faster access across the platform modules.

Reorganized the admin navigation into 14 clearly grouped sections for faster access across the platform modules.

Rebuilt the admin Download Manager with an enterprise interface, bulk actions and clearer file controls.

Rebuilt the admin Download Manager with an enterprise interface, bulk actions and clearer file controls.

Added a registered-members comment system scoped to each individual resource and download file, via a re-pointable modal with a guest sign-in prompt.

Added a registered-members comment system scoped to each individual resource and download file, via a re-pointable modal with a guest sign-in prompt.

Resolved several interface issues: light-theme white background, article table-of-contents overlap and page titles, a logged-out 503 error, and Arabic type-badge labels.

Resolved several interface issues: light-theme white background, article table-of-contents overlap and page titles, a logged-out 503 error, and Arabic type-badge labels.

Added automatic idle-session timeout with an email notification explaining the logout reason, improving account security on shared devices.

Added automatic idle-session timeout with an email notification explaining the logout reason, improving account security on shared devices.

Added branded PDF export to the Use Cases and Learning modules with full bilingual (Arabic RTL) layout and correct markdown rendering.

Added branded PDF export to the Use Cases and Learning modules with full bilingual (Arabic RTL) layout and correct markdown rendering.

Added AI auto-publishing so generated content can be scheduled and published automatically without manual posting.

Added AI auto-publishing so generated content can be scheduled and published automatically without manual posting.

Extended the educational module AI seeder to generate learning content across all supported frameworks, with fairer per-framework coverage.

Extended the educational module AI seeder to generate learning content across all supported frameworks, with fairer per-framework coverage.

Updated the PCI DSS framework references from 4.0 to the current 4.0.1 revision.

Updated the PCI DSS framework references from 4.0 to the current 4.0.1 revision.

Consolidated framework crosswalk mapping with an AI upgrade, an automation cron and email notifications, making cross-framework control mapping faster and current.

Consolidated framework crosswalk mapping with an AI upgrade, an automation cron and email notifications, making cross-framework control mapping faster and current.

Centralized the office-location and footer details across every outgoing email, and standardized classification banners and alert emails to the light branded design.

Centralized the office-location and footer details across every outgoing email, and standardized classification banners and alert emails to the light branded design.

Reworked the corporate email template to a clean light design and fixed multiple contrast and rendering issues so buttons and banners display correctly across mail clients.

Reworked the corporate email template to a clean light design and fixed multiple contrast and rendering issues so buttons and banners display correctly across mail clients.

Stabilized newsletter sending with verification resend, correct tab/redirect behavior, and multipart messages with proper headers for better inbox placement.

Stabilized newsletter sending with verification resend, correct tab/redirect behavior, and multipart messages with proper headers for better inbox placement.

Fixed the root cause of email delivery failures (SMTP authentication and missing DMARC). Newsletter, verification and notification emails now deliver reliably.

Fixed the root cause of email delivery failures (SMTP authentication and missing DMARC). Newsletter, verification and notification emails now deliver reliably.

Document and report exports (incident response, BCM, roadmap, downloads) now use short-lived signed tokens and stream as direct downloads, so internal file paths are never exposed.

Document and report exports (incident response, BCM, roadmap, downloads) now use short-lived signed tokens and stream as direct downloads, so internal file paths are never exposed.

Introduced an enterprise OTP control center for the admin panel with per-page enforcement toggles and full coverage of sensitive pages.

Introduced an enterprise OTP control center for the admin panel with per-page enforcement toggles and full coverage of sensitive pages.

Added admin visibility and control over locked accounts, including reviewing and clearing lockouts triggered by failed login protection.

Added admin visibility and control over locked accounts, including reviewing and clearing lockouts triggered by failed login protection.

Added an admin hardening suite: full audit logging, role controls, session-integrity checks, idle timeout, login alerts, and a break-glass emergency-access mechanism.

Added an admin hardening suite: full audit logging, role controls, session-integrity checks, idle timeout, login alerts, and a break-glass emergency-access mechanism.

Resolved the findings from the June security audit across critical, high and medium severities, hardening authentication, input handling and access paths platform-wide.

Resolved the findings from the June security audit across critical, high and medium severities, hardening authentication, input handling and access paths platform-wide.

CrossModuleContext.php: read-only context provider aggregating live data from risks, compliance, incidents, threats, vendors, assets, controls, and audits. Schema-tolerant via INFORMATION_SCHEMA with per-request caching. AI-prompt-formatted output injected into ARIA vCISO system prompt. Admin diagnostic page at /xyz/cross-module-status with toggle, module picker, and live data preview.

Automatic subscription-based page gating via SubscriptionPageRegistry.php injected into the main router (index.php). Setup tool at /xyz/subscription-feature-seeder seeds plan→feature matrix: Free (community), Pro (compliance/risk/threat), Enterprise (+AI/vCISO), Consultant (all). Global enable/disable toggle.

Upload PDF/DOCX/TXT/CSV/XLSX documents and AI automatically parses and pre-fills form fields with confidence scores. Phase 2: native PDF processing via Anthropic API (base64 document blocks), DOCX template auto-generator from form questions, admin approval queue with approve/reject/delete. FormAiIntake.php engine (1,246 lines).

8-pointed Islamic star SVG preloader with pulsing vertex dots, HUD corner brackets, dynamic 8-state status cycle, and animated 0-100% counter. Platform cyberpunk palette (#00ff88/#00d4ff on #060a0f). Bilingual branding. Session-aware auto-dismiss.

ARIA vCISO conversation memory with automatic summarization and context injection from last 3 conversations. Smart follow-up chips parsed from AI Next Actions (EN+AR). Quality signal indicators: reading time, controls cited count, confidence level pills.

AI-powered email classification with 4 security levels (public/internal/confidential/restricted). 3-layer cache (memory, DB, content-hash). Auto-classifies via EmailHelper::wrap() and EmailTemplateEngine::render(). Admin panel with toggle, stats, live test, cache clear. Bilingual classification banners in all outgoing emails.

Directory modal now pre-fills from user registration data (name, phone, avatar, industry, city, department, company size, bio, LinkedIn, CV). Inline CV re-upload support. Admin email and bell notifications on submission. New admin queue at /xyz/ciso-directory-queue with 4 tabs and approve/reject workflow with email notifications.

Per-module AI seeding schedule with configurable frequency (hourly/daily/weekly/monthly) and items per run. New ai_seeder_schedule table with run history (rolling 500 logs). Admin UI with 3 tabs (Modules/Schedule/History), cron status bar, per-card toggle, Run Now button. 8 modules supported. Bilingual EN/AR.

17 auto-discovered profile section files aggregated into unified user profiles. 3 new tables (profile_sections, profile_section_config, profile_section_views). Admin panel with drag-reorder and tier-based visibility (self/peer/admin). Role-based section access control.

One-time cryptographic tokens for all file downloads. User-bound, 1-hour expiry, consumed on first use. No file paths exposed to browser.

Email OTP verification enforced on page, API, and file downloads. Admin bypass, session + DB fallback, configurable per-module.

Professional bilingual (AR/EN) invoices with ZATCA TLV QR codes, company branding, VAT breakdown, subscription terms, PAID watermark, full RTL Arabic support.

Double-entry bookkeeping, chart of accounts, automated journal entries from payments, VAT tracking, financial statements (P&L, balance sheet), multi-period reporting.

MyFatoorah payment gateway, ZATCA-compliant VAT invoices, promo codes, plan management, billing cycles (monthly/annual), subscription agreement enforcement, admin dashboard with KPIs.

ARIA vCISO generates downloadable Word (.docx), Excel (.xlsx), PowerPoint (.pptx), and PDF files directly from AI responses. Auto-detects document requests, instant format conversion, secure token-based downloads with no URL exposure.

Comprehensive OTP enforcement audit: 39→95 pages gated, 56 authentication gaps closed to zero. Extended page-otp-gate.php with 88 page mappings. Admin OTP coverage dashboard with per-page toggles. 23 legacy/dev pages flagged for cleanup.

AI document analysis against 6 frameworks, 92 seeded controls, gap detection, remediation recommendations, admin panel.

4 match types (exact, partial, regex, fuzzy), Arabic normalization, warn→suspend→ban escalation, integrated into 6 platform modules.

Enterprise AI Virtual CISO with conversation management, 6 framework modes (SAMA CSF, NCA ECC, PDPL, ISO 27001, NIST CSF, PCI DSS), NDA enforcement, OTP gate, quick actions by role, activity logging, admin dashboard.

Domain accordion, bilingual notes, search/filter, export, AI analysis for compliance assessments.

4 display modes, 10 categories, cybersecurity quotes integrated into dashboard.

Rebuilt AI chatbot with conversation history, knowledge base search, support OTP, DOCX export, admin analytics.

Monitors dark web for organization domains, emails, credentials with risk scoring and alert notifications.

Async AI threat intelligence reports with live polling, categories CRUD, cron-based generation, professional formatting.

Excel/CSV import with AI column detection, framework mapping, auto-sync to assessment engine.

Drag-and-drop form builder with field types, validation, submission management, export.

NDA → Terms → Setup Wizard → Dashboard flow with step tracking and bilingual content.

Classification labels and defaults, frontend display, page classification API with per-page security labels.

Event creation, registration management, capacity tracking, QR check-in, bilingual pages.

Timezone fix (UTC-6 vs Asia/Riyadh), 7 new handlers, improved logging and error recovery.

Settings-driven backup with keyset pagination, automated scheduling, and restore capability.

Complete quiz system with AI question generation, timed assessments, scoring analytics, certificates.

Automated forum content generation with AI-created topics, replies, and discussions.

Automated daily email digests with platform activity summary and threat alerts.

Real-time visitor tracking, page views, session analytics, geographic distribution.

9 match scores, behavioral scoring, credential inflation detection for user verification.

Phishing simulation, awareness campaigns, training assignments, completion tracking, reporting.

Course management, lesson tracking, progress analytics, certificate generation, AI content in EN/AR.

Fixed registration enforcement popup positioning: centered in viewport with solid background, body scroll locked when popup is active, and proper light/dark theme support. Users must register or login — no way to see content behind the popup.

Fixed header menu overflow on smaller screens, scrolled header stays white in light theme with dark text, dropdown menus with white background, and nav items properly visible. Added body overflow-x hidden to prevent horizontal scroll.

Redesigned community comment system with unified form wrapper, clean toolbar icons with hover states, focus glow effects, gradient post button, AI suggest reply integration, and Markdown support label. Professional look matching platform design language.

Rebuilt user profile with premium UI: hero card with gradient banner and avatar upload, bilingual name fields (EN/AR), professional info (company, job title, bios), security score ring, MFA management, earned badges with XP progress bar, notification toggle switches, and privacy/data export tab. 5 tabs with full dark/light theme support.

Dedicated admin page for monitoring all private messages: dashboard with 8 stats + 14-day activity chart, conversations table with user details and status, message browser with type badges and read status, and complete audit trail with action types, IP addresses, and timestamps.

Enterprise messaging between connected CISO directory users. Split-pane UI with conversation list, real-time message bubbles with read receipts, AI-powered smart reply suggestions, instant EN↔AR translation, professional message templates, archive/block controls, and full audit trail visible to superadmins. 12 API endpoints with complete action logging.

Seeded all empty platform tables with professional Saudi cybersecurity content: 8 CISO profiles, 6 security policies, 8 vendor assessments, 3 board reports, 3 compliance roadmaps, 60 posture scores, 4 study plans, 7 connections, 33 user badges, 5 community posts, 4 case studies, 8 events, and 8 bookmarks. All bilingual EN/AR.

New daily intelligence page: auto-aggregates news, CVEs, threats, and events for any date. Features interactive calendar with activity dots, Saudi Cyber Pulse section with Vision 2030 messaging, ARIA AI smart summary and security advisory generators. Daily cron job generates AI brief and sends HTML email to admin at 6 AM.

Patched all 10 publisher and seeder files with session_write_close() and set_time_limit(120) to prevent platform-wide lockups during AI content generation. Deleted 5 orphaned debug files.

Full automated backup system: daily cron job (registered in CronManager), GZip-compressed database dumps, uploads/config ZIP archives, HTML email reports with status badges, configurable retention policy, and enterprise admin panel with 5 tabs (Dashboard, Files, History, Settings, Cron Setup). All managed from admin — no manual cPanel needed.

Fixed 63 hardcoded dark colors across 41 admin files. Replaced dark backgrounds (#0d1117, #161b22, etc.) with CSS variables, swapped rgba(255,255,255) borders to neutral rgba(128,128,128), and converted form-input class to Bootstrap form-control across 58 admin pages for proper light/dark theme support.

Standalone certificate print page with A4 landscape layout, customizable colors and text from admin settings, seal image, QR verification code, expiry date, and print/save PDF toolbar.

Global bookmark widget added to all content pages. One-click save for episodes, CVEs, and news articles with animated toggle, toast notifications, and link to reading list. AI-powered reading recommendations with topic picker.

Deployed ARIA AI across all platform features: threat analysis, reading recommendations, profile enhancement, daily challenges, assessment advice, compliance reports, gap analysis, CISO alerts, network analytics, content curation, trend analysis, weekly digest, platform insights, executive reports, policy generation, and KPI design.

Complete rebuild of admin pages: Assessment Manager (4 tabs), Threats Manager (5 tabs), Directory Manager (4 tabs), Reading List Manager (4 tabs), Command Center Manager (8 tabs). All with full CRUD, AI analysis tools, analytics dashboards, and bilingual interface.

Enhanced threat dashboard with 3,188 CVEs, 292 threat feeds, severity filtering, per-CVE AI analysis, threat landscape AI brief, and live threat ticker. Admin panel with bulk management and purge tools.

Launched professional CISO directory with 8 Saudi cybersecurity leader profiles, connection system (accept/reject), verification badges, industry/city search filters, and AI-powered profile enhancement and networking suggestions.

Built guided self-assessment wizard supporting SAMA CSF, NCA ECC, PDPL, and ISO 27001. Features step-by-step control evaluation, AI-powered gap analysis, maturity scoring, and exportable compliance reports.

Implemented complete gamification system with 24 badges across 6 categories, XP tracking with 10 levels, daily AI challenges, leaderboard with rankings, and activity logging. Integrated across learning, community, and assessment features.

Deployed full CISO Command Center with: Weekly AI Brief, Board Report Generator, Security Posture Score, Compliance Roadmap Builder, Policy Generator (12 types), Peer Benchmark, Certification Study Planner, and Vendor Risk Check. All features powered by ARIA AI with bilingual EN/AR output.

Launched comprehensive 5-level learning system: SAMA CSF Fundamentals, NCA ECC Practitioner, PDPL Privacy Professional, Cybersecurity Leadership, and Advanced Threat Defense. Features include AI-generated content and quizzes, progress tracking with XP rewards, printable A4 landscape certificates with QR verification, and admin management panel with bulk AI content generation.

7-tab admin training manager with AI course/quiz/content generation in EN/AR.

7-folder DM system with stars, pins, drafts, bulk actions, consultant inbox with 11 folders.

9 frameworks, 280+ controls, AI analysis, domain accordion with per-control status tracking.

Photo upload, LinkedIn validation, professional profiles, username system, admin approval.

Interactive global threat map with real-time attack visualization and APT tracking.

Discussion forums with categories, threads, moderation, reputation, expert badges.

Real-time CVE tracking with severity filtering, CVSS scoring, and notifications.

Searchable compliance document library with framework filtering and bilingual support.

Added: Case Studies Manager, Regulatory Events Manager, Alert Broadcaster, Simulator Scenario Builder, Digest Controller, ARIA Analytics, Threat Actors Database, Question Bank, News Aggregator, ARIA Knowledge Manager.

Redesigned the live threat ticker with premium dark gradient background, LIVE indicator badge, edge fade effects, scanning grid texture overlay, and full RTL support for Arabic interface.

Fixed scenario cards not responding to clicks. Root cause: all JavaScript functions were trapped inside an IIFE closure, making them inaccessible to HTML onclick handlers.

Authoritative cross-framework control mappings across all 9 frameworks. NCA ECC mapped to SAMA CSF, ISO 27001, NIST CSF, PCI DSS, CIS v8, NCA CSCC, PDPL, and SOC 2. Bidirectional relationships with mapping type classification (equivalent / related).

Complete self-service compliance assessment system. Users can assess against 9 frameworks simultaneously with manual, AI-assisted, or full AI auto mode. Includes professional reports (Executive/Detailed/Remediation Roadmap/Audit-Ready), cross-framework mapping, CSV export, and PDF generation.

Fixed assessment reports always showing LTR when interface is Arabic. Fixed undefined array key warnings for domain names. Reports now correctly detect interface language and render RTL.

OTP code length (4/6/8 digits) is now fully controlled from Admin → Settings → Security. All auth pages (login, register, reset password, profile, contact) automatically render the correct number of input boxes matching the configured length.

Public chatbot, compliance quiz, FAQ auto-answer, news summarizer, calendar scheduler, message drafting, smart search, maturity assessment

Public chatbot, compliance quiz, FAQ auto-answer, news summarizer, calendar scheduler, message drafting, smart search, maturity assessment

Glossary auto-linking now works on both Arabic and English pages. Arabic terms use Unicode-aware word boundaries. Terms without Arabic translations show an (EN) badge. Improved visual styling with cyan underline and background wash.

Fixed registration OTP emails not being delivered. Root cause: emails were queued but never dispatched. Now sends immediately via configured mail method with bilingual HTML template.

Public chatbot, compliance quiz, FAQ auto-answer, news summarizer, calendar scheduler, message drafting, smart search, maturity assessment

Public chatbot, compliance quiz, FAQ auto-answer, news summarizer, calendar scheduler, message drafting, smart search, maturity assessment

Public chatbot, compliance quiz, FAQ auto-answer, news summarizer, calendar scheduler, message drafting, smart search, maturity assessment

Automated weekly intelligence digest covering NCA/SAMA regulatory updates, top CVEs affecting KSA, threat actor activity, sector-specific alerts, and compliance deadlines.

New AI Intelligence Engine with anomaly detection, user behavior analysis, threat pattern recognition, performance percentile scoring, and predictive risk indicators. Full admin panel with dark glassmorphic UI.

Interactive real-time threat map showing attack origins, targeted sectors, and threat intensity across the Kingdom. Includes GCC regional view and sector-specific threat breakdowns.

Compliance auto-mapper, BCP scenario generator, KPI trend analyzer, ticket auto-responder, regulatory change analyzer, asset risk classifier, audit finding analyzer, policy improver

Compliance auto-mapper, BCP scenario generator, KPI trend analyzer, ticket auto-responder, regulatory change analyzer, asset risk classifier, audit finding analyzer, policy improver

Security hardening: contact form OTP verification is now always enforced regardless of admin toggle. Prevents bypass through settings manipulation.

Enhanced dark web mention checker with 8 intelligence signals: leaked credentials detection, darknet forum mentions, ransomware group tracking, paste sites monitoring, and threat actor profiling.

Compliance auto-mapper, BCP scenario generator, KPI trend analyzer, ticket auto-responder, regulatory change analyzer, asset risk classifier, audit finding analyzer, policy improver

Compliance auto-mapper, BCP scenario generator, KPI trend analyzer, ticket auto-responder, regulatory change analyzer, asset risk classifier, audit finding analyzer, policy improver

Compliance auto-mapper, BCP scenario generator, KPI trend analyzer, ticket auto-responder, regulatory change analyzer, asset risk classifier, audit finding analyzer, policy improver

Navigation bar now spans 99% of the viewport for better screen utilization. Reduced side padding from 32px to 8px. Removes the 1400px max-width constraint on the header.

Enterprise-grade inactive user management: auto-disable after 90 days, tiered warning emails (30/15/7/1 days before disable), exemption management, bulk actions, full audit log, and daily cron automation.

Login and register pages no longer require scrolling on standard viewport heights. Reduced container padding, compacted register form step 3, and switched to flex-start alignment.

Self-service compliance, billing, calendar, white-label branding, onboarding

Self-service compliance, billing, calendar, white-label branding, onboarding

Interactive cybersecurity incident simulator with 3 real-world scenarios (ransomware, BEC phishing, healthcare data breach), timed decisions, SAMA CSF / NCA ECC / PDPL framework references, grade scoring, and LinkedIn share.

CSRF, XSS prevention, rate limiting, input sanitization, WAF compatibility, secure sessions.

Custom PHP 8 MVC framework with routing, middleware, templating, database abstraction.

Role-based access control (superadmin, admin, editor, user), tenant isolation.

Complete Arabic/English bilingual system with RTL support and language switching.

Self-service compliance, billing, calendar, white-label branding, onboarding

Self-service compliance, billing, calendar, white-label branding, onboarding

Self-service compliance, billing, calendar, white-label branding, onboarding

Full SAMA CSF and NCA ECC self-assessment with control-by-control scoring, AI gap analysis, remediation roadmap generation, cross-framework mapping, and printable compliance reports.

TOTP MFA, API key auth, WAF/IDS, CORS/CSP, nginx config, Docker deployment

TOTP MFA, API key auth, WAF/IDS, CORS/CSP, nginx config, Docker deployment

ARIA upgraded with live CVE context injection, intent detection (7 types), smart model routing (Sonnet/Haiku based on query complexity), conversation history (30 messages), and SAMA CSF / NCA ECC awareness.

TOTP MFA, API key auth, WAF/IDS, CORS/CSP, nginx config, Docker deployment

TOTP MFA, API key auth, WAF/IDS, CORS/CSP, nginx config, Docker deployment

TOTP MFA, API key auth, WAF/IDS, CORS/CSP, nginx config, Docker deployment

Complete CVE database with NVD integration, AI-powered bilingual analysis (EN/AR), EPSS threat scoring, CISA KEV tracking, automatic Arabic translation, and CVE detail pages with MITRE technique mapping.