The work between the tools is the work that matters.
Coordinates was founded in Dubai in 2015 around a simple observation: security teams did not need another isolated security product. They needed a better way to connect the technologies they already had, understand what was happening across them and coordinate the work between them.Our first product was released in 2017. Today, we build and operate cor.xyz, a technology-agnostic cyberdefense operating system designed around the same conviction: solve the client’s security problem first, regardless of which technologies sit underneath it.
Explore cor.xyzWhere we began.
Context, rebuilt by hand
As security environments grew, so did the number of technologies, alerts, identities, assets and exceptions that had to be understood together. Skilled analysts were repeatedly reconstructing the same context—what an asset was, who used it, what happened before, what mattered and what action each technology required.
Repeatable work, turned into software
We began converting that repeatable cyberdefense work into software. We built a technology-agnostic orchestration foundation that could retrieve evidence, enrich and correlate activity, interact with different security technologies and execute governed workflows.
That foundation became the first layer of cor.xyz—and the basis for everything we have built since.
Execution first. Then context.
Then governed agents operating across both.
Each wave builds on the foundations before it. None replaces what came earlier; all three remain active within cor.xyz today.
2017
Hyperautomation, orchestration & technology-agnostic execution
We converted repeatable cyberdefense work into software across the lifecycle—not just isolated tasks inside individual products. The orchestration foundation retrieves evidence, interacts with different technologies, enriches activity and executes governed workflows across the environment.
cyberdefense work could be executed consistently across heterogeneous technologies through software.
2022
Client security data model
We connected the evidence produced across the environment into a persistent model of each client’s security context—assets, identities, roles, vulnerabilities, detections, incidents, historical activity, security initiatives and response history.
activity could be understood in the context of the client’s own environment rather than as isolated alerts.
2026
Governed agent-human operating model
Specialized agents operate across threat research, investigation, correlation, detection development, validation, health monitoring, recommendations and workflow initiation. They work from the Client Security Data Model and execute through the orchestration foundation beneath them. Humans provide judgment, business context, authorization, accountability and governance where required.
agents gained both the context to understand the environment and the governed execution layer to act within it.
The model is not the differentiator. The foundations beneath it are.
What we are today.
Coordinates delivers Managed Cyberdefense through cor.xyz, our cyberdefense operating system. Clients get one operating capability across monitoring, detection, investigation, threat hunting, DFIR, response, advisory and continuous security improvement—supported by specialized agents, security specialists and client-specific context. MDR remains an important capability within that model, but it is only one part of the wider cyberdefense operation.
A cyberdefense operating system.
cor.xyz works across the client’s existing security technologies and supports deployment in the Coordinates cloud, a sovereign Coordinates cloud, the client’s own cloud tenancy or on-premises.
Specialist teams.
Coordinates specialists provide investigation, escalation, judgment, authorization and governance where human expertise is required.
One accountable relationship.
Coordinates remains accountable for operating the cyberdefense function across the agreed scope—not simply for generating or escalating alerts.
Where to find us.
CoordinatesDubai Internet City, Building 9PO Box 501758, DubaiUnited Arab Emirates+971 4 451 9706[email protected]
Follow Coordinates on LinkedIn (opens LinkedIn)See how it would work in your environment.
A briefing is a working session with the team behind cor.xyz. We’ll discuss your environment, existing technologies, operating model, sovereignty requirements and response authority—and show how Managed Cyberdefense would work around them.