Sertan Selcuk, the VP for METAP and CIS at OPSWAT, says, the company will highlight how the rise of AI-driven exploits, encrypted attacks, and increasingly complex network environments demands a new approach to cybersecurity

What solutions are you highlighting at GISEC this year?
OPSWAT is participating in GISEC as a Diamond sponsor this year and we are proud to showcase our latest cybersecurity advancements in critical infrastructure protection (CIP). We shall have live demos and sessions, through OPX labs, offering practical insights on safeguarding vital systems and networks. Alongside the Lab, will be OPSWAT’s Nuclear Plant Model Reactor, a display that underscores the company’s expertise in securing sensitive environments like nuclear power plants.

How does GISEC help your company engage with the Middle Eastern cybersecurity market?
Our GISEC participation allows us to demonstrate our steadfast commitment to delivering IT/OT cybersecurity solutions and fostering the cyber talent that the region needs to defend its critical infrastructure and sustain economic progress.

Alongside the product showcase and demos, a couple of senior executives from OPSWAT will be holding sessions. During day two, on the Government Stage, hosted by Dubai Electronic Security Center, OPSWAT Founder and CEO, Benny Czarny, will present “Breaking the Firewall: Revolutionizing Cyber Defense for a Connected World”. He will make the case for a fundamental rethinking of the traditional firewall, highlighting how the rise of AI-driven exploits, encrypted attacks, and increasingly complex network environments demands a new approach to cybersecurity.

Also on day two, on the Critical Infrastructure Stage, OPSWAT’s Director of Products and Solutions, Kris Voorspoels, will take part in a panel discussion on the security crisis facing the Industrial Internet of Things (IIoT) in the regional oil and gas sector.

Finally, aiming to enhance cybersecurity standards across the region in alignment with the goals of the UAE National Cybersecurity Strategy, OPSWAT Academy will offer complimentary CIP certifications, such as File Security Associate (OFSA), Secure Storage Associate (OSSA), Email Security Associate (OESA), Web Traffic Protection Associate (OWPA), and Data Transfer Security Associate (ODSA).

How would you describe the current cybersecurity threat landscape in the Middle East?
The biggest cybersecurity challenge facing many regions will likely be the increasing sophistication of cyberattacks targeting critical infrastructure. As organizations become more interconnected and reliant on digital technologies, attackers are focusing on high-impact targets like power grids, government, defense and financial institutions. These types of attacks can cause widespread disruption and significant damage.

From a defender side, we’re seeing a major shift toward zero-trust architectures, increased investment in OT cybersecurity, and a growing emphasis on securing energy, manufacturing, and transportation.

How do cultural or regulatory differences impact cybersecurity strategies in the Middle East compared to other regions?
Many countries in the region enforce localized regulations that require on-premise or air-gapped solutions, limiting reliance on global cloud services. At OPSWAT, we support these regional needs by offering solutions that ensure compliance with local laws, enable secure on-premise deployments, and provide protection across both IT and OT environments. Additionally, there’s a strong push for developing local cybersecurity talent, driven by government initiatives and national strategies. At OPSWAT Academy, we contribute to workforce development by delivering hands-on training and certifications aligned with regional cybersecurity priorities.

How do your company’s products and services address the specific threats faced by regional businesses?
Our approach to cybersecurity has evolved significantly over the last 12 months. Our solutions are designed to secure both IT and OT environments using patented technologies such as multi-scanning, Deep CDR, and advanced threat intelligence.

We’ve focused on enhancing our ability to detect and mitigate advanced threats, particularly those targeting complex and interconnected systems. We’ve integrated AI-powered threat detection, real-time monitoring, and data sanitization into our solutions to ensure that organizations can respond to threats quickly and effectively. As the cybersecurity landscape continues to shift, we’ve also prioritized automation and machine learning to proactively identify vulnerabilities and block attacks before they impact operations.

Are you partnering with any local entities or governments to enhance regional cybersecurity resilience?
Yes, we actively partner with local entities, government agencies, and critical infrastructure operators across the Middle East to enhance regional cybersecurity resilience. These collaborations focus on securing OT and IT environments, aligning with national cybersecurity frameworks. By working closely with regional stakeholders, we ensure our solutions meet compliance requirements while addressing the unique cybersecurity challenges faced across sectors such as energy, defense, and government.

What advice would you give to regional businesses looking to strengthen their cybersecurity posture in 2025?
My recommendation to organizations investing in cybersecurity today is simple: Prioritize a multi-layered, proactive approach to security. Cyber threats are constantly evolving, and it’s no longer enough to simply have strong defenses in place; you need to anticipate potential risks, continuously monitor your systems, and invest in technologies that can detect and respond to threats in real-time. This means leveraging AI and machine learning to identify vulnerabilities before they’re exploited.

Additionally, ensure comprehensive training for your employees to prevent human error and reinforce a security-conscious culture. By implementing robust, proactive, and adaptable security measures, organizations can significantly enhance their ability to prevent, detect, and respond to cyber threats, ultimately safeguarding their assets and ensuring long-term resilience in an ever-evolving threat landscape.