CPX (a G42 company)
Abu Dhabi-based cyber and physical security provider that describes itself as a G42 company.
Facts
| Headquarters / legal entity | Mohamed Bin Zayed City, Abu Dhabi, UAE (the site's Location section); the footer says CPX is a G42 company Documented Source |
|---|---|
| Services in the region | UAE-based, offering services in the region. Documented Source |
| Purple team service | Published, as Purple Teaming Documented Source |
| Engagement length, as published | Not published |
| Delivery model, as published | Not published |
| Credentials, as published |
Tags: Documented stated specifically on a first-party or primary page. Vendor-reported a claim by the provider that cannot be checked independently. Not confirmed not verified from a primary source.
Purple team service
[ PUBLISHED ]
CPX publishes a purple teaming page within its security testing and evaluation services.
What it is, as published. Breach and attack simulation combined with real-time defensive validation, in four parts: collaborative simulations, detection engineering (testing and refining SOC detection, monitoring rules and alert workflows), security control validation, and live feedback loops to operational teams.
What is absent. Methodology phases, duration, ATT&CK reference, tools, deliverables and regulatory mapping. The call to action is a contact form.
Wider portfolio. Red teaming, vulnerability assessment and penetration testing, SOC advisory, managed XDR and the UAEComply.360 product are named in the site menu and service pages, without descriptions.
Evidence by criterion
Seven criteria, each rated in words. What the levels mean. A level describes what is published, not a finding that a capability is missing.
The purple teaming page names no phases, steps, duration or rules of engagement. Source
The Security Testing and Evaluation page names red teaming, vulnerability assessment and penetration testing, purple teaming and source code review; the menu also lists SOC advisory, managed XDR and a UAEComply.360 product. Source
The provider is headquartered in Abu Dhabi and lists a UAEComply.360 product. No UAE regime is named on the purple teaming page. Source
No report contents are listed on the purple teaming page. Source
The page does not mention ATT&CK or threat intelligence. Source
The site shows a count of ISO certificates without naming them. Third-party accreditation reports were not confirmed on CPX pages. Source
The page names collaborative simulations with real-time defensive validation, detection engineering and live feedback loops. It gives no description of how the work is run or whether a retest follows. Source
Why this position
CPX sits fourth because it is the one provider in this list headquartered in Abu Dhabi that names purple teaming as a service on its own page, next to managed detection and a regulatory-assurance product. It sits below the providers above because the page says little about how the work runs. There is no method, length, ATT&CK reference or report content, and the credentials are a count without names. A UAE buyer who values local headquarters over published method could place it higher.
The order is a reasoned judgment, not a sum of the levels. See how the order is decided.
Deliverables as published
No itemised report contents published.
No itemised report contents published. The page lists benefits such as reduced false positives, stronger coordination between offensive and defensive teams and lessons applied to defensive capability.
UAE fit
Headquartered in Abu Dhabi and part of G42. The wider portfolio lists a UAEComply.360 product, which is not described on the site.
Limits of public evidence
- No method, duration, ATT&CK reference, tools, deliverables or regulatory mapping on the purple teaming page.
- The ISO certificates are counted, not named. CREST and DESC claims come from a third-party listicle and were not confirmed on CPX pages.
- The service pages show a title and a link for each service and no description for most of them.
Best suited for / less suited for
Best suited for
- UAE-based buyers who want a locally headquartered provider
- Buyers who plan to scope the exercise in conversation and want managed detection nearby
Less suited for
- Buyers who need a published method, length and report format before contact
- Buyers who need named accreditations they can check
Compare and read on
Compare with
Are you this provider? Request a correction. See also all rankings.