CONFIDENTIAL - MAKR Internal Report
Executive Summary
The February 28, 2026 Iran war has fundamentally reordered GCC investment priorities across all five sectors analyzed. Iranian missile and drone strikes have hit desalination plants, oil infrastructure, data centers, and ports across all six GCC states simultaneously - an unprecedented escalation that has exposed critical vulnerabilities. The net effect is a massive acceleration of defense spending, infrastructure hardening, logistics diversification away from the Strait of Hormuz, and digital sovereignty investments. Energy transition programs (hydrogen, solar) have NOT been paused - they have been accelerated as energy security converges with energy transition. Companies entering the GCC market should position around three themes: resilience infrastructure, defense localization, and Hormuz-bypass logistics.
1. Security and Defense
Short-term shifts (0-6 months)
Budget reality
Saudi defense spending reached $72.5B in 2025 (7.7% CAGR since 2021), with $74.76B allocated for 2026. The UAE signed $6B in military equipment contracts at IDEX 2025 alone. These budgets are being front-loaded toward air and missile defense replenishment after the February-March 2026 attacks consumed significant interceptor stocks.
What is being fast-tracked
- Missile defense interceptor replenishment. The Pentagon signed agreements with Lockheed Martin to quadruple THAAD interceptor production (96 to 400/year) and triple Patriot interceptor production (600 to 2,000/year). The UAE operates 2 THAAD batteries; Saudi operates 1 with plans for 6 more. (Breaking Defense, Time)
- Counter-drone systems. Iran launched 541 drones at UAE alone; 35 penetrated defenses. Saturation attacks remain the primary gap. Low-cost counter-UAS systems are the immediate procurement priority. (Breaking Defense)
- Integrated air defense architecture. CENTCOM established an air and missile defense coordination cell at Al Udeid Air Base (Qatar) in January 2026. The GCC "Belt of Cooperation" (Hizam Al-Taawun) for joint aircraft tracking is being accelerated. (ME Council on Global Affairs)
Specific contracts and companies
- EDGE Group (UAE): $2.9B in deals at IDEX 2025, including $1.2B aerial munitions contract with UAE MoD, $524M naval support via subsidiary Maestral. Joint ventures with Indra (Spain) on loitering munitions, Safran (France) on smart weapons, Barzan Holdings (Qatar) on defense tech. (Breaking Defense, GovCon)
- SAMI (Saudi): Launched SAMI Land Company, SAMI Autonomous Company, SAMI Land Industrial Complex, and the HEET programme at World Defence Show 2025. RUKN local content program targets 50% defense localization by 2030 (currently ~25%). (Breaking Defense)
- Tawazun Council (UAE): Thales agreement to produce Ground Master air surveillance radars in-country. Strategic partnership on naval combat management system localization. (US-UAE Business Council)
Medium-term shifts (6-24 months)
- Defense localization acceleration. Both UAE and Saudi have mandatory offset programs requiring foreign contractors to generate local industrial credits. SAMI targets top-25 global defense company status by 2030. ITAR constraints on US systems create openings for Turkey's Baykar and South Korea's Hanwha, which structure deals around local assembly and technology hand-offs. (Tandfonline)
- Cyber defense buildup. Iran shifted from episodic cyberattacks to sustained campaigns against critical infrastructure. GCC cybersecurity spending expected to exceed AED120B ($32.6B) by 2030, with UAE and Saudi accounting for 60%+. (CSIS, Arabian Business)
Capability Gaps Domestic Players Cannot Fill
- High-end missile defense systems (THAAD, Patriot) - fully dependent on US supply chain
- Advanced electronic warfare and sensor fusion
- Satellite-based intelligence, surveillance, reconnaissance (ISR)
- Complex system integration across multi-national defense architectures
- Low-cost, high-volume counter-drone solutions at scale
What Gets Paused
- Non-critical military modernization programs (luxury defense purchases, parade equipment)
- Long-horizon R&D in favor of immediate procurement
2. Energy Transition
Short-term shifts (0-6 months)
The convergence effect
Iran conflict does NOT slow energy transition - it accelerates it. Energy security and energy transition are now converging, not competing. Countries seeking to reduce dependence on disrupted oil flows are fast-tracking renewables, nuclear, and efficiency. (Bulletin of Atomic Scientists, Columbia CGEP, Atlantic Council)
Nuclear programs
- UAE Barakah: Now provides 25% of UAE electricity. Operational and undamaged. Represents proof-of-concept that GCC nuclear works. (Bulletin)
- Saudi nuclear deal: US-Saudi Joint Declaration on Civil Nuclear Cooperation signed November 2025 during MBS White House visit. US companies positioned as "partners of choice" for large nuclear plant construction. No enrichment in the deal. Pending Section 123 Agreement Congressional review. Saudi soliciting bids for two large reactors. (DOE, Arms Control Association)
Hydrogen
- NEOM Green Hydrogen Project at 90% construction complete (December 2025). 4GW solar/wind + 2.2GW electrolysers. 600 tonnes/day hydrogen capacity. First green ammonia product expected 2027. Export deals signed with TotalEnergies (70K tonnes ammonia/year) and near-complete with Yara (1.2M tonnes/year). (Oil & Gas ME, AGBI)
- UAE targets 1.4M tonnes green hydrogen/year by 2031, scaling to 15M tonnes by 2050. Two production hubs by 2031. (Onero Institute)
Medium-term shifts (6-24 months)
- Oil infrastructure protection tech: Urgent demand after Iranian strikes caused "extensive damage" to Ras Laffan (Qatar's LNG heart), damage to refineries in Kuwait and Saudi, and closure of gas facilities in UAE. Pipeline monitoring, drone detection for energy assets, and blast-resistant infrastructure become priority spends. (The Conversation)
- Pipeline bypass projects accelerated: UAE's ADCOP pipeline (1.8M bbl/day to Fujairah) is the lifeline. UAE exploring a second pipeline to Fujairah. Saudi's East-West pipeline reactivation discussions. Iraq exploring Basra-Turkey pipeline alternatives. (Al Jazeera, CNBC)
What Gets Paused
- Speculative clean energy R&D without near-term deployment path
- Carbon capture projects with long payback periods
3. Water and Desalination
Short-term shifts (0-6 months)
Vulnerability is existential
GCC operates ~3,401 desalination plants producing 22.67M cubic meters/day (one-third of global capacity). Qatar depends on desalination for 77.3% of water; Bahrain 67.5%; UAE 52.1%. (CSIS)
Documented damage
Fujairah F1 (UAE) sustained indirect missile/drone debris damage. Doha West (Kuwait) similarly damaged. A Bahrain desalination center was hit by an Iranian drone on March 8. All continued operations but the vulnerability was demonstrated. (CSIS, Al Jazeera)
Emergency storage crisis
UAE strategic water reserves provide only TWO DAYS of national demand. Bahrain, Kuwait, Qatar have "insufficient storage capacity to buffer significant supply interruptions." This is the single most critical vulnerability in the GCC. (CSIS)
What gets fast-tracked
- Strategic water reserve expansion (underground storage, distributed reserves)
- Physical hardening of coastal desalination plants (blast protection, redundancy)
- Mobile/deployable desalination units for emergency response
- Inland desalination from brackish groundwater sources (reduces coastal exposure)
Medium-term shifts (6-24 months)
- Decentralized desalination architecture replacing mega-coastal-plant concentration with distributed smaller plants
- Abu Dhabi's Integrated Water Strategy: Targets lower production costs, 40% reduction in network losses by 2035, competitive tenders for next-gen desalination and reuse technologies. Abu Dhabi positioning as regional testbed for digital leak detection, smart metering, low-carbon desalination. (Our Future Water)
- AI-integrated water systems: TAQA deploying AI-integrated water recycling; DEWA building GenAI-native utility roadmap
- ADIO cluster activity: ADIO's cluster strategy targets AED300B in GDP and 110,000 jobs. Food and water technology is a named strategic cluster. While not specifically branded "WaterTech cluster," water innovation sits within ADIO's strategic industrial targeting alongside smart vehicles, food tech, financial services, life sciences. (Gulf News)
What Gets Paused
Nothing in water is getting paused. This is now treated as national security, not utility management.
4. Logistics
Short-term shifts (0-6 months)
Hormuz bypass is no longer theoretical - it is operational. The conflict activated contingency logistics infrastructure within weeks. (Asia Times)
Specific rerouting actions (timeline)
- March 14, 2026: Oman-UAE Green Corridor activated
- March 22: Saudi-UAE trade bridge launched (Sajaa dry port link via Gulftainer + Saudi Ports Authority)
- March 25: DP World installed 3 ultra-heavy-lift cranes at Jeddah Islamic Port; MSC launched Gulf Shuttle service (3,000 container capacity)
- March 27: Saudi Railways launched international corridor connecting Dammam, Yanbu, Jubail to Al-Haditha Port (near Jordan)
Etihad Rail performance
Transported 8,000+ containers and ~500,000 tonnes of cargo across 100+ train journeys in the conflict's first two weeks alone.
Key corridor
Khorfakkan (Sharjah) > Sajaa Dry Port > Etihad Rail > cross-UAE/Saudi. Ships avoid Hormuz entirely by docking at Khorfakkan on the Gulf of Oman, then moving cargo overland.
Shipping line responses
MSC (Gulf Shuttle), CMA CGM (REDEX), Maersk (A19), Hapag-Lloyd (SE4), Emirates Shipping Line (Galex) all activated alternative services. (Container Mag)
Medium-term shifts (6-24 months)
- IMEC acceleration. India-UAE Intergovernmental Framework Agreement signed; construction of key infrastructure (rail, ports, highways) began April 2025. EU-India trade deal (January 2026) provides additional momentum. Progressing through bilateral frameworks (UAE, US, Saudi) rather than original multilateral structure. The Hormuz crisis has increased urgency but governance alignment remains the constraint. (Fortune, Atlantic Council)
- Etihad Rail cross-border expansion: Abu Dhabi-Sohar (Oman) corridor announced October 2025. Saudi rail integration advancing.
- AD Ports Group / Fujairah: AED500M investment in Fujairah Terminals targeting 1M TEU capacity by 2030. Fujairah is now THE strategic alternative to Gulf-side ports, sitting 70 nautical miles from Hormuz on the open-ocean side. However, drone attacks hit Fujairah oil facilities in March, demonstrating even bypass infrastructure needs hardening. (CNBC)
- Warehousing and stockpiling: Expect major investment in strategic reserves, bonded warehousing at inland dry ports, and pre-positioning of critical supplies
What Gets Paused
- Greenfield port projects with long timelines; focus shifts to expanding capacity at existing alternative ports
5. Digital Infrastructure
Short-term shifts (0-6 months)
Iran attacked data centers physically. This is unprecedented. AWS data centers in UAE and Bahrain were struck with moderate damage but extensive service disruption (banking, consumer services). IRGC claimed to attack an Oracle data center in Dubai (denied by Dubai). Iran publicly threatened 18 tech companies including Apple, Google, Microsoft, Nvidia, Oracle, Tesla, G42, Cisco, HP, Intel, IBM, Dell, Palantir, JPMorgan, Boeing. (CNBC, Time, CSIS)
What gets fast-tracked
- Physical hardening of data centers (blast protection, underground construction, dispersal)
- Cybersecurity spending surge (already projected to exceed AED120B by 2030 across GCC; this accelerates timeline)
- Data sovereignty localization: Companies that had been slow to build local infrastructure now have board-level urgency
- Backup/redundancy across multiple GCC geographies (not concentration in one emirate)
Market scale
GCC data center market projected at $9.49B by 2030. 174 active/planned projects worth $93B+ across GCC. Saudi leads with 61 data centers. G42's Stargate UAE is a $20B, 5GW AI hyperscale facility (with OpenAI, Nvidia, Oracle). Saudi's HUMAIN targets 1.9GW data center capacity by 2030, expanding to 6.6GW by 2034. (Yahoo Finance, ORF)
Medium-term shifts (6-24 months)
- Submarine cable route diversification. The war simultaneously disrupted both Red Sea and Strait of Hormuz cable routes for the first time ever. Major new cable projects: Ooredoo's FIG (Fibre in Gulf) connecting all GCC states; WorldLink ($700M cable from Abu Dhabi through Gulf to Iraq/Turkey/Europe). Saudi and UAE driving demand for intra-regional cables + dense terrestrial interconnection. (Stimson Center, Subsea Cables, Rest of World)
- Cloud infrastructure localization: Every hyperscaler (AWS, Azure, Oracle, Google Cloud) now faces physical risk in the region. Expect accelerated sovereign cloud partnerships and hardened facility requirements as conditions for continued operation.
- UAE AI cybersecurity market: Growing from AED4.4B to AED19.7B by 2030. Saudi AI-based cybersecurity revenues projected from AED4.6B to AED16.5B by 2030. (WEF)
What Gets Paused
- Speculative metaverse/Web3 projects. All digital infrastructure capital redirects to resilience, sovereignty, and physical security of existing assets.
UAE-Specific Responses
- EDGE Group aggressively expanding through international JVs (Spain, France, Qatar) while winning multi-billion dollar domestic contracts
- Tawazun offset program requiring defense contractors to generate local industrial credits - any company selling to UAE defense must invest locally
- AD Ports Group investing AED500M in Fujairah as Hormuz-bypass hub
- ADCOP pipeline (1.8M bbl/day) is UAE's energy lifeline; second pipeline being explored
- ADIO cluster strategy positions Abu Dhabi as hub for food/water tech, smart vehicles, fintech, life sciences - security spending reinforces rather than displaces these clusters
- G42 (UAE's AI champion) was specifically named on IRGC's threat list, raising questions about AI infrastructure security
Saudi-Specific Responses
- $74.76B defense budget (2026), SAMI transformation into strategic defense group with 50% localization target by 2030
- US-Saudi nuclear cooperation deal signed November 2025 - American companies building large nuclear plant, no enrichment
- NEOM green hydrogen at 90% complete, first product 2027
- Saudi Railways activated international logistics corridor (March 27, 2026) connecting East-West with Jordan border
- 61 data centers (highest in GCC), HUMAIN targeting 1.9GW by 2030
ADIO Priority Sectors in Light of Regional Tensions
ADIO's cluster strategy (targeting AED300B GDP impact and 110,000 jobs) spans: smart/autonomous vehicles, food and water technology, financial services (FIDA cluster), gaming and media, life sciences (HELM cluster), and defense-adjacent advanced manufacturing (Archer Aviation manufacturing center). Regional tensions REINFORCE these priorities rather than diverting from them - defense localization, water security, and digital infrastructure are now national security imperatives aligned with ADIO's existing clusters.
Sanctions and Technology Transfer Implications
- EU expanded dual-use technology restrictions on Iran (UAV components, missile tech, sensors, electronics, telecom)
- UAE detained exchange operators with IRGC links as part of sanctions compliance tightening
- ITAR constraints on US defense tech create openings for non-US suppliers (Turkey's Baykar, South Korea's Hanwha) who offer local assembly + technology transfer
- Companies operating in GCC must navigate tightened compliance environments - enhanced KYC, end-use monitoring, and sanctions screening now baseline requirements
- Dubai's historical role as trade hub creates heightened scrutiny for any technology company operating there
Recommendations for GCC Market Entry Advisory
1
Defense localization is the entry ticket.
Any defense-adjacent company must have a localization/offset plan. Pure import plays are dead. Structure deals around local assembly, JVs, and technology hand-offs.
2
Water security is the most underserved, highest-urgency sector.
Two days of UAE water reserves is a crisis waiting to happen. Decentralized desalination, mobile units, smart water management, underground storage - all massively underinvested.
3
Logistics companies should target the Khorfakkan-Sajaa-Etihad Rail corridor.
This is the new trade spine. Dry port operators, bonded warehouse providers, and cross-border freight management are immediate opportunities.
4
Data center companies must now sell resilience, not just capacity.
Physical hardening, geographic dispersal, sovereign cloud capabilities are now table stakes. Underground or blast-hardened facilities will command premium.
5
Cybersecurity is a $32B+ opportunity by 2030.
AI-based cybersecurity, OT/ICS security for energy infrastructure, and threat intelligence are the highest-growth segments.
6
Counter-drone technology is the biggest immediate defense gap.
Neither EDGE nor SAMI can fill the counter-UAS saturation attack problem domestically. This is where foreign technology companies have the clearest opening.
7
Nuclear supply chain (Saudi) is a multi-decade, multi-billion dollar opportunity.
The US-Saudi deal creates a pathway for American companies, but the Section 123 Congressional review is a bottleneck to watch.