X01
BOOTING APPLIED AI - 0%
Applied AI - Abu Dhabi

Ship AI that works.

Start a project -> See what we build
X01 is an applied AI studio in the UAE. We take AI from prototype to production for teams that have to answer to real customers, real regulators, and real budgets.
Based inAbu Dhabi - UAE
Founded2025
FocusProduction AI
SCROLL
ADDED MoET ADCCI ADGM Hub71 FTA CBUAE MoHRE ICP TDRA
MANIFESTO - 01 / 03 - KEEP SCROLLING
PROTOTYPE.
PRODUCTION.
SHIPPED.
Anyone can demo. We ship what works on Monday morning.
What we do

Nine disciplines.
One accountable team.

01

Web.

End-to-end web — frontend to API.

ReactVueNext.jsLaravelNode.NET
02

Database.

Relational, document, cache — with backups.

MySQLPostgreSQLMongoDBMSSQLRedis
03

Mobile.

Apps customers keep, not delete.

React NativeFlutterSwiftKotlin
04

Desktop.

Native power, quiet UX.

ElectronTauri.NETmacOSWindows
05

XR / VR.

Immersive on Quest and beyond.

UnityMeta QuestWebXRMRGames
06

Cyber Security.

Red team, blue team, hardening.

Red TeamBlue TeamPentestHardeningCompliance
07

Dev Ops.

Servers, DNS, CI — paged when it breaks.

LinuxNginxDNSCI/CDMonitoring
08 — SELF-HOSTED

AI Systems.

Chatbots, agents, voice. On your own infrastructure.

ChatbotsFinancial AgentsHR AgentsVoice Gen
09 — SELF-HOSTED

AI Visuals.

Text-to-image and text-to-video pipelines running on your own servers. Brand assets, marketing loops, full model control.

ImageVideoSelf-hosted
AI-generated image
A single idea

Applied AI, shipped like software. Run like production.

In the box

What actually goes into every X01 build.

01 - Evaluation

An eval harness that catches what a demo can't.

Deterministic tests for stochastic systems, versioned against your real traffic.

02 - Guardrails

Prompt firewalls, PII redaction, refusal budgets.

Every model call passes through a policy layer you can inspect and defend.

03 - Cost & Latency

Model routing, caching, and observability by default.

Cheaper inference where it fits, premium models only where they earn it.

04 - Human-in-Loop

Approval queues your compliance team can defend.

Audit trails, reviewer queues, and rollback - not an afterthought.

01
FEATURE - EVALUATION HARNESS
How it comes together

Signal in.

Every X01 system starts the same way - messy, real-world signal from your operation.

01 - Signal
02 - Structure
03 - Decision
FRAME - 001 / 240
Why teams pick X01

Small studio. Production discipline.

Not a consultancy. Not an agency. A studio that owns the outcome from scope to Monday morning.

* Delivery

Prototype to production in ~42 days on average.

A working system in front of real users fast, then hardened against what you learn.

* Uptime
99.9%

12 mo rolling.

* Cost

Inference bills, cut.

62%
* Coverage

AI, Fullstack, Mobile, Desktop, Cyber - one accountable team.

No handoffs. No sub-contractors. No finger-pointing between vendors when it breaks at 3 AM.

* Governance

Regulator-ready audit trails.

Built for GCC compliance from day one, not bolted on later.

Approach

We stop at production, not at proof-of-concept.

Most AI projects break the day a real user touches them. We build for that day, first.

* 01 - SCOPE

Start with the failure mode.

What breaks when this ships - cost, latency, compliance, hallucination - is where we start. Not the model, not the demo.

READ MORE ->
* 02 - BUILD

Ship in weeks, not quarters.

Small, opinionated teams. A working system in front of real users fast, then hardened against what you learn.

READ MORE ->
* 03 - OPERATE

Own it after launch.

Evaluation, monitoring, and cost controls stay with the system. AI that quietly works on Monday morning is the deliverable.

READ MORE ->
Founders - Team

Three founders. One small, senior team.

We stay small on purpose. The people who scope the system are the people who ship and run it.

CO-FOUNDER - 01 CEO - Operations & Strategy

Samya Ali

Drives operational execution and corporate strategy across enterprise ventures. Scales internal processes, aligns cross-functional execution, and ensures delivery against core business outcomes.

CO-FOUNDER - 02 CTO - Systems & Security

Abdulrahman Hani

Hands-on engineering lead with expertise across web architecture, platform delivery, and cybersecurity. Owns the end-to-end technical infrastructure and product security posture.

CO-FOUNDER - 03 CFO - Growth & Marketing

Hossam Hassan

Combines financial oversight with data-driven market acquisition and growth strategy. Manages capital allocation while driving brand scaling and enterprise ROI.

Our projects — shipped

What "in production" actually looks like.

01 Full-Stack · SaaS Shipping 2026

A school OS with its own video stack.

Multi-tenant Laravel 12 platform. 20+ modules — students, staff, attendance, exams, fees, timetable, payroll, parents, library, notice board — plus a custom WebRTC meetings stack built in-house on peer-to-peer media with a self-hosted TURN/STUN relay, server-side recording, and live chat transcripts. English/Arabic with full RTL. Replaces Zoom, Teams, and Meet entirely.

Laravel 12WebRTCMulti-tenantLivewireRTLServer-side RecordingSelf-hosted
02 AI Systems · Self-hosted In production

A self-hosted ChatGPT for the enterprise.

Streaming LLM chat with RAG over a multi-GB indexed technical knowledge base — conversation history, code blocks, PDF + OCR file uploads, and web search. Hybrid BM25 + embedding re-ranking. Low-latency retrieval with zero data leaving the box.

Ollama (qwen2.5)FastAPIRAGSQLite FTS5BM25sentence-transformers
03 Cyber Security · AI In production

An autonomous pentest, in one command.

AI agent orchestrating 60+ recon, scanning, and exploitation tools — amass, nuclei, masscan, nmap, sslscan. Produces vulnerability distribution charts, attack-surface diagrams, and AI-generated executive reports from a single run. Board-ready without hours of manual tool-chaining.

PythonFastAPILLM AgentsPentest ToolsWorker Queue
04 Mobile · UAE In production

Live in the App Store, made for the Gulf.

Backend, admin platform, and landing site powering FitBird UAE — 500+ workouts, 900+ exercises, personalized plans, BMI tooling, live chat support, and subscription billing. Companion iOS and Android apps live in the App Store and Google Play with paid subscriptions.

LaravelREST APIsMySQLiOSAndroidSubscriptions
05 Digital Forensics · AI In production

Drag-and-drop malware triage, with a verdict.

Digital forensics agent that ingests any file and delivers an AI verdict on whether the artifact is malicious, suspicious, or benign — YARA rules, PE/ELF dissection (pefile, pyelftools, capstone), entropy and strings analysis. Turns a multi-tool triage workflow into a single upload.

YARApefilepyelftoolscapstoneLLM VerdictBinary Analysis
06 Automation · AI In production

ERP → strategic report, in your inbox.

Self-hosted n8n behind Nginx + TLS running three live production flows: an Odoo ERP → Google Gemini pipeline that emails HTML strategic reports; a WhatsApp AI assistant that classifies incoming messages, transcribes voice, and replies; and a Telegram media bot with per-content-type pipelines.

n8nGoogle GeminiSerpAPIOdoo ERPWhatsApp APITelegram BotSelf-hosted
07 Dev Ops · Linux Ongoing

8+ subdomains. One hardened VPS.

Multi-domain Linux estate with zero-trust hardening: automated Let's Encrypt TLS renewal, per-subdomain IP allow-listing, and rsync-based zero-downtime deployments across production workloads. 5+ production apps on a single hardened VPS.

Ubuntu / RHELNginxDockerLet's EncryptUFW / firewalldrsyncCI/CD
08 OSINT · AI In production

Six OSINT tools, one queryable target.

OSINT workstation profiling any target — person, username, email, domain, or IP — across 3000+ sites. Runs Sherlock, Maigret, theHarvester, blackbird, and holehe and aggregates the intel into a unified LLM-synthesized report. What used to take five terminals takes one form field.

OSINTSherlockMaigrettheHarvesterblackbirdholeheLLM Synthesis
09 Automation · AI In production

LLM triage for production incidents.

LLM-driven operations assistant that ingests server and application logs, classifies incidents by severity, suggests remediation, and orchestrates internal APIs via authenticated REST gateways — cutting manual triage effort and accelerating routine maintenance.

Python 3OpenAIAnthropicLaravel webhooksMySQLRAG
10 Reverse Engineering · AI In production

Binary triage without opening Ghidra.

Reverse-engineering assistant for binaries and assembly — analyses entropy, strings, and PE/ELF structure, identifies packing and obfuscation, and explains exploits, ROP chains, anti-debug tricks, and CTF challenges in plain language.

Reverse EngineeringAssemblycapstoneBinary AnalysisCTF
11 Full-Stack · LMS Shipped

An LMS shipped end-to-end.

Laravel LMS with course catalog, category taxonomy, enrolment, lessons, instructor profiles, and content search. Server-rendered Blade UI backed by relational data and a moderation workflow — schema, instructor and student flows, moderation, and responsive UI in one codebase.

LaravelPHP 8MySQLBladeBootstrapLMS
12 Dev Ops · Linux Open source

Drop-in Linux ops visibility.

Lightweight PHP web dashboard for monitoring Linux servers — CPU, RAM, disk, network throughput, uptime, and active services. Designed to drop onto any LAMP host with zero external dependencies for instant ops visibility.

PHPLinuxBashSysinfoSelf-hosted
13 Full-Stack · E-commerce Shipped

E-commerce built from scratch.

Full-stack PHP / MySQL e-commerce platform with product catalog, category filtering, search, shopping cart, checkout, and a role-based admin panel for products, categories, orders, users, and multi-admin management — built without any framework scaffolding.

PHPMySQLBootstrapJavaScriptAdmin PanelRBAC
14 Full-Stack · Auction Shipped

An auction house, in raw PHP OOP.

PHP / MySQL auction marketplace with category browsing (antiques, paintings & art, other pieces), per-item bidding, user registration and profile pages, and a full admin back office for items, categories, users, and bids. Built OOP-style with dedicated classes/, handlers/, and db/ layers.

PHPMySQLOOPComposerBootstrapAuctionsAdmin Panel
Registered · Compliant · Cleared

The UAE we work through.

Compliance & certifications
ISO/IEC 27001:2022 SOC 2 - Type II GDPR UAE PDPL CBUAE Sandbox DIFC Innovation Licence
Field notes - Insights

Recent thinking from the studio.

Short essays on the engineering behind production AI, published quarterly.

TECHNICAL

Why eval harnesses beat prompt engineering.

Every X01 project starts with deterministic tests for stochastic systems. Here's why.

6 MIN READREAD ->
POINT OF VIEW

Arabic voice AI: what the demos always miss.

Dialect handling, code-switching, and confidence estimation in real production traffic.

8 MIN READREAD ->
CASE NOTE

Cutting inference bills 62% - the routing playbook.

A repeatable model-routing pattern we deploy across every stack we ship.

10 MIN READREAD ->

Common questions.

Prefer to talk? Book a 30-minute call.

Fixed-scope builds of production AI systems, and longer partnerships where we own operation and evolution of the system after launch.

Real estate, financial services, construction and industrial safety, and government-facing services in the UAE and wider GCC.

Both. We start with the best model available for the task, then decide what - if anything - is worth training or fine-tuning ourselves.

Consultancies deliver slides and hand off. We deliver a system that stays live, and we stay accountable for it.

Ready when you are

Let's ship
something real.

Tell us what breaks in production today. We'll tell you honestly if AI is the right lever.

Or write us directly at hello@x01.ae. We reply within one business day.