Recce maps every security control to the major AI governance frameworks — globally and across the MENA region — giving compliance teams a single pane for attestation, audit, and evidence collection.
From prompt injection to unbounded consumption — Recce addresses every risk in the OWASP Top 10 for Large Language Model Applications with purpose-built Band C controls, output filtering, and telemetry.
OWASP LLM Top 10 · LLM01 Prompt Injection · LLM02 Sensitive Info Disclosure · LLM03 Supply Chain · LLM04–LLM10 · NeMo Guardrails · OPA · Band C controls
Twelve Recce capability domains mapped across every major AI security and governance standard — one control layer that satisfies all frameworks simultaneously.
Recce Compliance Mapping · 12 domains · ISO/IEC 27001 · EU AI Act · NIST AI RMF · UAE AI Guide · ISO/IEC 23894 · OECD AI Principles · OWASP LLM Top 10 · CIS AI Controls v1.0
Recce maps to every major MENA-region AI and cybersecurity framework — from Saudi Arabia's SDAIA AI Control Guidelines and the UAE Information Assurance Standard to Qatar's CTRM, Oman's NCSF, Bahrain's NCA Guidelines, and Egypt's Cybersecurity Authority controls.
MENA Compliance Mapping · KSA AICG (SDAIA) · UAE IAS (TDRA) · KSA NCA ECC · Qatar CTRM (NCSC) · Oman NCSF · Bahrain NCA · Egypt ECA · ISO/IEC 27001
Recce surfaces policy decisions and audit events in real time — so evidence collection is continuous, not a last-minute scramble before your next audit.
 (4).png)
.png)
Recce gives compliance and risk teams the technical evidence layer they need to satisfy board-level AI governance requirements.
Every allow/block decision across Bands A–D is written to an immutable, timestamped audit log. Evidence is queryable, exportable, and audit-ready.
OPA policies define what can enter, deploy, and execute across your AI estate. Policy changes are versioned, reviewed, and traceable.
Garak red-team probes run continuously. The compliance scorecard updates after each run — not just at annual audit time.
Telemetry streams directly to your existing SIEM. Risk events are classified and routed before they reach a human analyst.
Request a compliance mapping session. We'll walk through which Recce controls satisfy which clauses in your target framework.
