Cycling through all six. Tap any point to stop.

Measured on six things

Enterprise-grade bulk SMS gateway with direct carrier con...

Security

HTTPS enforced but missing HSTS, CSP, frame protection, and DMARC. Security checklist 3/12. No SOC 2, ISO, or bug bounty mentioned. SPF present.

Screenshots

1 / 1

Qalaama Bulk SMS Saudi Arabia

About this app

Qalaama is a powerful bulk SMS gateway designed specifically for the Saudi Arabian market, offering direct connectivity to major carriers like STC, Mobily, and Zain. With sub-2-second delivery speeds and a 99.6% success rate, it ensures reliable and rapid message delivery. The platform is fully compliant with CITC (now CST) regulations, provides PDPL-compliant data residency in Riyadh, and supports ZATCA-compliant invoicing in SAR. Key features include CITC-authorized sender ID registration, smart Unicode Arabic concatenation, omnichannel fallbacks, and seamless API integration. It's ideal for businesses across finance, retail, logistics, government, healthcare, and more, enabling them to send transactional alerts, OTPs, marketing campaigns, and notifications efficiently.

Key features

1Direct carrier connectivity to STC, Mobily, and Zain with sub-2-second delivery and 99.6% success rate.
2CITC-authorized sender ID registration, PDPL data residency in Riyadh, and ZATCA-compliant SAR invoicing.
3Smart Unicode Arabic concatenation, omnichannel fallbacks (voice verification), and REST API integration.

Target customer profile

Drawn from the product itself, not from a survey.

Demographic

Financial institutions (banks, fintech)

Pain points

Need for secure, compliant OTP and transactional message delivery with high reliability.

Primary needs

SAMA compliance, PDPL data residency, sub-2-second delivery, and audit logs.

Demographic

E-commerce and retail businesses

Pain points

High cart abandonment, need for real-time order updates, and promotional campaign effectiveness.

Primary needs

Bulk SMS for marketing, order confirmations, delivery alerts, and CITC-compliant sender IDs.

Demographic

Government and public sector

Pain points

Requirement to broadcast emergency alerts and notifications to large populations quickly.

Primary needs

High-throughput delivery, direct carrier connections, and compliance with local regulations.

Scout Review

Written by AI from measured evidence, scored out of 100.

Qalaama is a Saudi-focused bulk SMS gateway with genuine regional strengths: direct carrier connectivity to STC, Mobily, and Zain, CITC-compliant sender ID registration, PDPL data residency in Riyadh, and ZATCA-compliant invoicing. The bilingual site and 4-step onboarding show real thought for the local market. But the execution has gaps: pricing in EUR undermines the SAR/ZATCA pitch, mobile performance lags (LCP 5.3s), security headers are largely absent (3/12 checklist), and there's no free trial. Against Unifonic (also Saudi-based) and global players like Twilio and Infobip, Qalaama's compliance depth is its best card — but it needs to tighten the fundamentals to compete.

Measure by measure

Usability

Clear 4-step onboarding documented, login/CTA present. No free trial or live demo. Pricing in EUR despite ZATCA/SAR claims — a mismatch for Saudi buyers.

Design

Modern dark-themed SaaS site with clear hero, stat cards, and carrier logos. Bilingual EN/AR support. Pricing page is functional but visually plain compared to the polished homepage.

Speed

Desktop Lighthouse 98/100, but mobile 75/100 with LCP 5.3s and FCP 2.9s. Desktop is snappy; mobile needs optimization for the 5.3s LCP.

Security

HTTPS enforced but missing HSTS, CSP, frame protection, and DMARC. Security checklist 3/12. No SOC 2, ISO, or bug bounty mentioned. SPF present.

Accessibility

Lighthouse a11y 93/100. Failing: color contrast, non-focusable skip links, missing main landmark. Bilingual EN/AR support is a plus. No a11y statement.

Growth

Real problem: Saudi-specific compliance (CITC, PDPL, ZATCA) is a genuine wedge vs. global players. Direct carrier connectivity is concrete. But no evidence of traction or unique moat beyond localization.

Improvement areas

Pricing page defaults to EUR — switch to SAR for Saudi visitors to match the ZATCA/SAR compliance pitch.
Missing security headers (HSTS, CSP, DMARC, frame protection) and no published SOC 2/ISO certification.
Mobile Lighthouse performance 75/100 with LCP 5.3s — optimize images and defer non-critical JS.
No free trial or sandbox API key; 'Contact Sales' only, which slows developer evaluation.

Design & Usability

Qalaama's design is competent and regionally aware — the bilingual EN/AR toggle and carrier logos (STC, Mobily, Zain) immediately signal 'we know Saudi.' The homepage is polished with clear stat cards and a 4-step onboarding flow. But the pricing page is a letdown: it defaults to EUR despite the entire pitch being about SAR, ZATCA compliance, and local billing. For a Saudi buyer, seeing EUR pricing on a page that promises ZATCA-compliant invoices in SAR is a trust wobble. There's also no free trial or live demo, which raises the barrier for evaluation. The design earns points for localization and clarity, but loses them for the currency mismatch and lack of a hands-on trial.

Speed & Security

Speed is a tale of two devices: desktop Lighthouse scores 98/100 with CLS 0.001 and TBT 88ms — genuinely fast. Mobile drops to 75/100 with LCP 5.3s and FCP 2.9s, which is sluggish for a business audience that increasingly checks things on phones. Security is the weak spot. HTTPS is enforced, but HSTS, CSP, frame protection, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy are all missing. SPF is present but DMARC is not. The security checklist scores 3/12. For a platform selling SAMA-aligned, PDPL-compliant messaging to banks and government, the absence of basic web security headers and any published SOC 2 or ISO certification is a credibility gap. The product claims compliance for its customers but doesn't demonstrate it for itself.

Accessibility & Growth

Accessibility scores 93/100 on Lighthouse, with failing audits for color contrast, non-focusable skip links, and a missing main landmark. The bilingual EN/AR support is a genuine accessibility win for the region. No WCAG statement or a11y page exists, but the automated score is solid. Growth potential hinges on the Saudi compliance wedge: CITC-authorized sender ID registration, PDPL data residency in Riyadh, ZATCA-compliant invoicing, and direct carrier connections to STC, Mobily, and Zain. That's a real differentiator against Twilio (global, less local compliance depth) and Infobip (international, not Saudi-first). Unifonic is the closest competitor and is also Saudi-based, which limits the moat. The idea is sound and the market is real, but the product needs to prove it can win against a local incumbent with similar positioning.

Conclusion

Qalaama has a clear thesis: be the most compliant, most locally-connected SMS gateway in Saudi Arabia. That's a real need in a market where banks, government agencies, and retailers must navigate CITC, PDPL, and ZATCA rules. The direct carrier connections and Arabic Unicode handling are concrete advantages. But the product is held back by fixable issues: EUR pricing on a SAR-first platform, missing security headers, slow mobile load times, and no trial. Fix those, and Qalaama becomes a serious contender. Leave them, and Unifonic keeps the crown.

Suggestions for improvement

Switch pricing to SAR by default for Saudi visitors — the EUR display contradicts the ZATCA/SAR pitch and erodes trust.
Add HSTS, CSP, frame protection, and DMARC to close the security header gaps; publish a security page with compliance details.
Optimize mobile LCP (currently 5.3s) by compressing hero images, deferring non-critical JS, and using a CDN.
Offer a free trial or sandbox API key so developers can test delivery speed and Arabic concatenation before committing.

How we score

Alternatives comparison

Named competitors, point by point. Nobody paid to appear here or to be left out.

	Qalaama Bulk SMS Saudi Arabia	Twilio	Unifonic	Infobip
Saudi carrier connectivity	Direct connections to STC, Mobily, Zain	Global aggregator; Saudi delivery via partners	Direct connections to Saudi carriers	Direct operator connections globally, including KSA
CITC/CST sender ID registration support	Guided CITC/CST sender ID registration	Alphanumeric sender ID support; local registration varies	CITC-compliant sender ID registration	Sender ID registration support in KSA
PDPL data residency in Saudi Arabia	Data hosted in Riyadh, PDPL-compliant	Global data centers; KSA residency not default	Saudi-based data residency	Global data centers; KSA residency options
ZATCA-compliant invoicing in SAR	ZATCA-compliant e-invoices in SAR with 15% VAT	Invoices in USD/EUR; no ZATCA-specific compliance	Saudi-based billing; ZATCA compliance likely	Invoices in multiple currencies; no ZATCA-specific claim
Arabic Unicode concatenation	Smart UCS-2 Unicode handling for Arabic	Unicode SMS support	Arabic language SMS support	Unicode SMS support
Free trial / sandbox	No free trial mentioned; Contact Sales only	Free trial with credits	Free trial available	Free trial available
Omnichannel fallbacks (voice/WhatsApp)	Voice verification fallback; WhatsApp listed on pricing	SMS, voice, WhatsApp, email, chat	SMS, voice, WhatsApp, omnichannel	SMS, email, voice, WhatsApp, omnichannel