Riyadh: Saudi Arabia has announced a reward of up to SR50,000 for individuals who report cybersecurity violations, as the Kingdom strengthens public participation in protecting its digital infrastructure.

Reward Program by the National Cybersecurity Authority (NCA)

The National Cybersecurity Authority (NCA) stated that whistleblowers could receive up to SR50,000 or one percent of the fine collected, whichever is lower, if their report is proven and leads to a final ruling.

A committee of three officials will review the reported cases, assess eligibility, and determine the reward amount according to regulations. The authority added that the reward applies to offences such as:

• Conducting cybersecurity activities without a license or in violation of licensing terms

• Failing to comply with national cybersecurity standards and policies

• Withholding or falsifying information requested by the authority

Cybersecurity Violations and Penalties

Trading in unauthorized cybersecurity tools or services, or obstructing NCA inspectors, will also be considered violations. These acts are subject to the same penalties and are eligible for whistleblower reporting under this new initiative.

The NCA clarified that the reward will be disbursed only after a final court ruling or once the appeal period has expired, and the whistleblower’s report has played a decisive role in proving the violation.

Who Is Eligible for the Reward?

Not everyone qualifies for compensation. The NCA specified that its employees, their spouses, in-laws, and immediate relatives are ineligible. Similarly, public employees whose official duties include reporting such violations will not qualify.

The reward scheme also excludes cases that have already been reported or rewarded previously. Additionally, whistleblowers must sign a non-disclosure pledge, ensuring that any information related to the report remains confidential.

Saudi Arabia’s Push for Stronger Cybersecurity

This new initiative reflects the Kingdom’s commitment to promoting accountability and transparency in cyberspace. It is part of Saudi Arabia’s broader vision to become a regional leader in cybersecurity and digital governance.

By encouraging citizens and residents to report violations, the Kingdom aims to enhance its digital security ecosystem and ensure that its infrastructure remains safe from malicious or unauthorized cyber activities.