Dubai Unveils SARAAB, Open-Source AI to Detect Deepfake Videos

Dubai Electronic Security Centre (DESC) used the opening day of GISEC Global 2026 to unveil three linked cybersecurity initiatives: SARAAB, an artificial-intelligence model designed to detect deepfake video; the Dubai Cyber Skills Framework; and an ISR Auditor Certification Programme. Together, they cover three different parts of the same problem — identifying manipulated media, building a stronger cyber workforce and improving the consistency of information-security audits.

The most eye-catching announcement is SARAAB. DESC says the model was developed entirely by an Emirati team and is the first model of its kind produced by a government entity in the Arab region. The important wording is “unveiled”, not “download it today”. Gulf News reported that the model will be made available through developer platforms, while a DESC senior AI executive told Khaleej Times that the public open-source launch is planned by the end of 2026. That distinction matters if you are a developer, researcher or business hoping to test it immediately.

GISEC Global itself is running from 16 to 18 September at Dubai Exhibition Centre in Expo City Dubai. DESC is the event’s Official Government Cybersecurity Partner, so these announcements sit inside a broader three-day programme focused on AI, cyber risk, government security, critical infrastructure and workforce development.

According to Khaleej Times, SARAAB analyses facial features and uses a heat-map approach to highlight areas that may contain synthetic or manipulated layers. A DESC representative said the system analyses a video across its full duration rather than sampling only a short portion. That is relevant because a clip can contain genuine footage for most of its runtime and a manipulated segment only near the end.

The same report said DESC has been working on the model for about six months and quoted a 91 per cent accuracy rate. Treat that figure as a reported performance claim, not a universal promise. Accuracy in deepfake detection depends heavily on the test set, compression, editing, generation method and the kinds of faces or artefacts a model has seen. We did not find a public technical paper or benchmark package in the material available on 16 September that would let an independent reader reproduce the 91 per cent figure.

That caveat does not make the announcement insignificant. It simply separates an early product claim from independently repeatable evidence. For practical use, the interesting part will be what DESC publishes with the model: the code or model weights, documentation, supported video formats, benchmark data, known failure modes and guidance on how an alert should be interpreted.

DESC says SARAAB will be made available through developer platforms so AI engineers, cybersecurity specialists and researchers can test it, build applications around it and contribute to further development. Khaleej Times reported that the intended platform is Hugging Face, one of the most widely used repositories for machine-learning models and datasets.

Open publication can be valuable for a detection tool because it lets outside specialists inspect behaviour, compare results with other models and test edge cases that the original team may not have encountered. It can also make shortcomings visible faster. Deepfake detection is an adversarial field: generation systems improve, compression can erase tell-tale artefacts, and a detector that works well on one family of synthetic videos may perform very differently on another.

For Dubai organisations, the sensible expectation is that SARAAB could become one component of a verification workflow rather than a magic ‘real or fake’ button. A detector score should be combined with source checks, metadata, provenance, known-channel verification and human judgement — especially where a video could trigger financial, legal, reputational or public-safety consequences.

A DESC senior AI executive told Khaleej Times that concern from government entities about malicious actors using deepfakes for fake advertisements helped prompt the work. That is a useful clue to the intended problem: manipulated video is no longer only a novelty or political-media issue. It can be used to imitate a recognised person, create a false endorsement, manufacture an urgent instruction or make a fraudulent offer look more credible.

Dubai’s highly digital economy increases the value of fast verification. Residents routinely receive official-looking messages, payment links, delivery notices, investment promotions and social-media advertising on phones. Businesses make decisions through video calls, messaging platforms and remote approvals. None of that means every suspicious clip is a deepfake, but it does mean a locally developed detection capability has a clear operational use case if it proves reliable.

For ordinary users, the announcement should not change basic scam hygiene: do not transfer money or share credentials merely because a video looks convincing; verify unusual requests through a separate trusted channel; and be especially cautious when a clip creates urgency or asks you to bypass normal procedures. SARAAB is a technical tool under development, not a substitute for those habits.

The second initiative is less flashy but potentially broader in day-to-day impact. DESC says the Dubai Cyber Skills Framework is designed as a common reference for cybersecurity qualifications, certifications, training and career progression. Its intended users include cybersecurity professionals, employers, academic institutions and training providers.

That matters because job titles in cybersecurity can be inconsistent. Two organisations can use the same title for very different responsibilities, or different titles for essentially the same capability. A shared framework can help employers describe roles more clearly, training providers align courses to real competencies and workers understand what skills they need to progress. The value will depend on the detail of the framework and how widely it is adopted, not simply on the launch announcement.

DESC had already signalled that workforce development would be a major GISEC theme. Emirates News Agency reported before the event that the Centre would host the second editions of the Dubai Cyber Challenge — Government Edition and the School of Cyber Defense, and on 17 September would host members of the International Coalition for Cybersecurity Workforce to discuss skills frameworks and professional standards.

DESC also announced an ISR Auditor Certification Programme. The programme is intended to train auditors and information-security professionals to assess compliance with Dubai’s Information Security Regulation using more consistent methods and standards. In practical terms, the aim is to make evidence assessment and audit work less dependent on individual interpretation.

For organisations that operate in or work with Dubai Government environments, consistent auditing can matter as much as a new defensive tool. Controls only have value if organisations can show they are implemented, operating and reviewed. A certification programme can help build a shared baseline for people who assess that evidence, although the launch material does not yet answer every practical question about eligibility, course dates, assessment format or how certification will be renewed.

Businesses should therefore avoid treating the programme announcement as a new compliance deadline. We found no evidence in the 16 September material that DESC had created a new universal legal obligation for every Dubai company. The announcement describes a professional certification initiative around an existing information-security regulatory environment.

For people who want to see the initiatives in context, GISEC Global 2026 is at Dubai Exhibition Centre, Expo City Dubai, from Wednesday 16 September to Friday 18 September. The official event site lists public hours of 10am to 5pm and positions the 15th edition as the Middle East and Africa’s largest cybersecurity event, with more than 750 cybersecurity brands and attendees expected from across the world.

DESC invited the public to register for GISEC and visit its stand in Hall 5. Its wider programme includes government and student cyber competitions, and GISEC’s stages cover deepfakes, generative AI, ransomware, critical infrastructure, government security, cloud, forensics and emerging technology. Anyone attending specifically for SARAAB should still check the live event programme and DESC channels before travelling because demonstration times and session details can change during a trade event.

Expo City is some distance from central Dubai, so allow realistic travel time. Dubai Metro’s Route 2020 provides the simplest public-transport spine for many visitors, while taxis and ride-hailing can be more direct depending on where you start. Do not assume an event badge includes transport or parking; use the organiser’s current visitor information on the day.

For residents, SARAAB is mainly a signal that deepfake verification is becoming part of mainstream public-sector cybersecurity rather than a niche research topic. The useful consumer lesson is not to wait for a detector to rescue every situation. If a video appears to show a public figure, executive, family member or authority asking for money, credentials or unusual action, verify the request independently before responding.

For employers, the three announcements form a more coherent package than the SARAAB headline alone suggests. A detection model addresses one technical threat; the skills framework tries to make capability development more systematic; and the auditor programme focuses on whether security controls can be assessed consistently. The common thread is operational readiness rather than a single product launch.

For developers and researchers, the most important next milestone is the actual open-source release. Once SARAAB appears on the promised developer platform, the questions become concrete: licensing, reproducibility, model size, supported formats, inference requirements, datasets, false-positive behaviour and whether independent tests support the reported accuracy. Until then, the model has been unveiled and demonstrated, but it should not be described as a generally available public tool.

A few limits are worth spelling out because early technology coverage can easily turn a launch announcement into more than it is. We did not verify a public SARAAB download on 16 September. We did not find a public independent benchmark validating the reported 91 per cent accuracy. We did not find a consumer-facing app, browser plug-in or hotline that residents can use to submit suspicious videos directly to the model.

We also did not find evidence that a SARAAB result, by itself, is intended to serve as legal proof that a video is fake. Detection systems produce signals that need interpretation. A false positive can wrongly label genuine material; a false negative can miss a sophisticated manipulation. Provenance, original files, chain of custody and other forensic evidence can matter when the consequences are serious.

Finally, the Cyber Skills Framework and ISR Auditor Certification Programme were announced at GISEC, but the launch reports do not yet provide a complete public timetable for every course, assessment or implementation step. Employers and professionals should use DESC’s own channels for the detailed documents rather than relying on short news summaries.

We checked current reporting and first-party event information available on 16 September 2026. Gulf News reported DESC’s three GISEC launches and described SARAAB as an Emirati-developed open-source deepfake-detection model, alongside the Dubai Cyber Skills Framework and ISR Auditor Certification Programme. Khaleej Times reported additional technical and release details from a DESC senior AI executive, including the heat-map approach, the reported 91 per cent accuracy figure, roughly six months of development work and the plan to publish the model on Hugging Face by the end of 2026.

We also checked GISEC Global’s official 2026 event information for the 16–18 September dates, Dubai Exhibition Centre venue and event programme, plus Emirates News Agency’s 9 September report on DESC’s role as Official Government Cybersecurity Partner, its government and student competitions and the 17 September workforce-framework session. Where the sources differ in wording, we have used the more cautious interpretation: SARAAB has been unveiled, with public open-source availability planned rather than assumed.

Technology launches move quickly. If you are making a security, procurement, compliance or travel decision after publication, re-check DESC and GISEC directly for the latest model release, documentation, programme or access information.

Direct sources:

• Gulf News — DESC unveils SARAAB and two cyber initiatives, 16 September 2026
• Khaleej Times — SARAAB technical and planned release details, 16 September 2026
• GISEC Global — official 2026 event information
• Emirates News Agency — DESC at GISEC Global 2026, 9 September 2026