← All Use Cases
← →
CASE 46 · ADVISORY SCENARIO

Technical & Cyber Consultancy Matrix

A composite technology consultancy wanted a licence that could cover cybersecurity advisory, network consulting, IT transformation, cyber-risk work and related digital services without accidentally entering regulated financial or crypto activity.

Architecture & Construction

Activities & licensing scope

Dubai mainland activity matrix. Managed services and cyber testing must be matched to the exact deliverables; these codes do not authorise financial or virtual-asset services.

Activity 6202003 · Dubai mainland · DET reference

Information Technology Consultants

Activity description

Includes providing information technology consultancies to enhance performance in different aspects, in addition to proposing the adequate software consistent with the nature of the firm, it involve advising the proper technical applications for transformation to the platform of the block chain, with emphasis on the expected economic returns, the manager must have a Bachelor degree in Computer sciences or Information Technology, along with three years hands-on experience

Find this activity in the directory

Activity 6202005 · Dubai mainland · DET reference

Information Technology Network Services

Activity description

Includes firms specialized in providing the services of subscribing & Connecting to international information networking as well as specialized information banks and exchange of electronic mail which includes operating systems and applications such as electronic mail and the exchange of data electronically by using communication networks as well as their local and international lines. The role of those is limited to facilitating subscription procedures against fees or specified amount.

Find this activity in the directory

Activity 6202006 · Dubai mainland · DET reference

Cyber Security Consultancy

Activity description

Includes firms specialized in offering comprehensive professional cyber security consultancy to other organizations on how to prepare for, avoid and protect themselves against cyber-attacks and threats, such threats might involve networks, computers, programs and data damage or unauthorized acces,the manager must have a Bachelor degree in Computer sciences or Information Technology, along with three years hands-on experience

Find this activity in the directory

Activity 6202007 · Dubai mainland · DET reference

Cyber Risk Management Services

Activity description

Includes firms which help others with the essential tools needed to identify and asses cyber threats which might include users themselves, networks, devices, all software, processes, information in storage, applications, including recommending effective measures to eliminate or manage cyber threats.

Find this activity in the directory

Activity 6202008 · Dubai mainland · DET reference

Auditing, Reviewing &Testing Cyber Risks

Activity description

Includes firms engaged in auditing the organizations’ compliance with the standards and documented procedures that identify risks and vulnerabilities within the existing IT environment, also, conducting penetration testing to the established security measure for possible breaches and the exploitable vulnerabilities that an attacker might gain unauthorized access.

Find this activity in the directory
The decision in one sentence

Define the technical service boundary so digital consultancy does not imply permission for regulated financial services.

Read the requirement, the constraint and the proposed route together. The value of this case is the reasoning behind the setup, rather than an activity name in isolation.

YOUR SETUP ROADMAP / SPC FREE ZONE

A clear route.
From first call to first sale.

Four phases, 9 checkpoints. See the route at a glance, then open a checkpoint for the work, owner and timing. Daily updates continue during active work.

ROUTE OVERVIEW
  1. 01

    Plan

    Confirm the route and open your file.

    1. CHECKPOINT 01Choose the routeDay 1

      Activity, legal form and SPC Free Zone

      Owner / You and Vantablack
    2. CHECKPOINT 02Your file opensWithin 1 working day of payment

      Named team, checklist and your project timeline

      Owner / Vantablack
  2. 02

    Prepare

    Documents and activity checks.

    1. CHECKPOINT 03Documents and checksBefore submission

      Passports, KYC and anything the activity needs

      Owner / You, checked by Vantablack
    2. CHECKPOINT 04Name and initial approvalWithin 2 working days of complete documents

      Submitted to SPC Free Zone

      Owner / Vantablack, then the authority
  3. 03

    Launch

    Premises and the licence decision.

    1. CHECKPOINT 05PremisesBefore the licence

      Flexi-desk or office in the free zone

      Owner / You and Vantablack
    2. CHECKPOINT 06Licence issuedThe authority sets the date

      Your company exists; documents in your workspace

      Owner / The authority
  4. 04

    Operate

    Follow-on work in your agreed scope.

    1. CHECKPOINT 07Establishment card, visas, Emirates IDAfter the licence

      Immigration file for you and your team

      Owner / Vantablack PRO team
    2. CHECKPOINT 08Bank account and taxAfter the licence

      Bank application, VAT and Corporate Tax registration

      Owner / Vantablack and the bank
    3. CHECKPOINT 09Start sellingFrom the first week after the licence

      List your services on the Ecosystem and receive requests

      Owner / You, on Vantablack

Time markers are our service standards; authority steps follow the authority’s own timeline, and approvals are the authority’s decision. Your accepted quote confirms which post-licence services are included. Sales depend on licensing, approvals and demand.

THE STRUCTURE BEHIND THE SOLUTION

Follow the connected route.

Select a point to read the reasoning.

Business objective

01 Business objective A composite technology consultancy wanted a licence that could cover cybersecurity advisory, network consulting, IT transformation, cyber-risk work and related digital services without accidentally entering regulated financial or crypto activity.

A composite technology consultancy wanted a licence that could cover cybersecurity advisory, network consulting, IT transformation, cyber-risk work and related digital services without accidentally entering regulated financial or crypto activity.

The 6202 activity group contains consultancy, managed services, testing, DLT and internet/SEO functions with different boundaries.

We map the intended deliverables against the technical-consultancy matrix, check manager qualification requirements where the source specifies them, and keep DLT service activity clearly separated from crypto trading, exchange, brokerage or payment processing.

Technology businesses often describe themselves too broadly. We translate what the team actually delivers into a licence scope that is specific enough to be defensible.

Premises & indicative budget

Virtual office: only if eligible

First check the exact activity, licensing route, operating model and authority conditions. Virtual-office eligibility must be confirmed for your setup; it is not established by this case study. For an eligible Dubai mainland setup, our indicative planning example is AED 1,200 for trade-name reservation and initial approval, AED 3,500 for a virtual-office provider, and AED 12,000 for the licence: approximately AED 16,700 before Vantablack service fees. These are Vantablack planning estimates dated 20 October 2026, not official tariffs or costs recorded for this case. Provider tax, visas, immigration and labour files, external approvals and other scope-specific costs are separate where applicable.

Dedicated office, shop or warehouse

Where dedicated premises are required, replace the virtual-office allowance with the actual office, shop, warehouse or other suitable lease cost. Our planning allowance for the licence is AED 12,000 plus a market fee estimated at 5% of the annual lease value, subject to the authority assessment; the initial application allowance remains AED 1,200. Fit-out, deposits, inspections and activity-specific approvals may add costs. Your written quotation and actual authority voucher determine the payable amounts.

Planning guidance for a new enquiry, not a statement of this client’s costs or completed approvals. Basic and Advanced Setup include virtual-office sourcing and coordination where eligible; office-provider charges are separate.

Compare premises options and request current pricing
Apply the reasoningThis case explains the setup rationale. Current activity scope, eligibility and approval requirements must be assessed for your own business.

A proposed setup route and a completed licence are different outcomes. This page only states a completion result where it is recorded in the case narrative.

← Previous case Browse all cases Next case →
Apply this to your business

What function does the technology business perform for its customers?

Why this matters

Software, consultancy, testing, product sales and transaction facilitation are different deliverables. The technology label should not conceal an additional regulated role.

What could change the answer?

Adding brokerage, payments, sensitive product trading or another regulated function can require a review beyond the existing technology scope.

Check these details first

  • Deliverables and customer contracts
  • Direct service versus facilitation
  • Product trading or importing if relevant
  • Any financial, security or sector-specific boundary

Choose your next step

Get support