Key Takeaways
- • Dubai-based cybersecurity firm Dynova has crossed $500,000 in annual recurring revenue (ARR) in its first year while remaining profitable, fully bootstrapped and without raising venture capital, according to Gulf News.
- • Dynova sells a bundled security function through a single subscription starting at $2,500 per month, combining virtual CISO leadership, a Data Protection Officer, penetration testing, compliance automation and a 24/7 Security Operations Centre.
- • The company targets fintechs and growing businesses facing CBUAE and VARA licensing requirements, with UAE Cyber Security Council data citing roughly 600,000 attempted cyberattacks per day.
- • Founder and Managing Director Denis Yakimov positions the model as a cost-efficient alternative to in-house security teams, stating the subscription costs less than a single mid-level hire.
- • Clients include OGold and Alfred Holdings, and Dynova is an official provider within the Hub71 and Shorooq Partners ecosystems.
Summary
Dubai-based cybersecurity company Dynova has crossed $500,000 in annual recurring revenue in its first year of operation, according to Gulf News. The company reports it is profitable, fully bootstrapped and has not raised venture capital. Founded by security leaders with backgrounds in banking and fintech, Dynova offers startups and growing businesses a complete security function through a single subscription priced from $2,500 per month.
The company positions its offering as a replacement for piecemeal security purchasing, which typically involves multiple consultants, tools and one-off projects. Its subscription bundles virtual CISO leadership, a Data Protection Officer, a delivery team of security engineers and analysts, continuous penetration testing, compliance automation and a 24/7 Security Operations Centre. Services also cover security testing, continuous monitoring, incident response, compliance support and audit evidence.
The company's pitch is set against rising regulatory and threat pressure in the UAE. Gulf News cites the UAE Cyber Security Council's estimate of approximately 600,000 attempted cyberattacks per day, and research by Positive Technologies showing the UAE accounted for 35% of recorded cyberattacks across the Gulf in the first half of 2026. Fintechs seeking CBUAE or VARA licences, healthcare providers and organisations handling personal data face compliance requirements that extend beyond written policies, a burden that can be difficult for startups and SMEs with limited budgets.
Founder and Managing Director Denis Yakimov said, "A fintech applying for a CBUAE or VARA licence is held to the same security standard as a bank, with fifteen people and no security budget." He added that the company sells "the security team, not the project," and that crossing half a million dollars in ARR in its first year without raising capital indicates the pricing is right.
Dynova's team includes professionals from Equiti, Mashreq and the UAE Banks Federation. The company is an official service provider within the Hub71 and Shorooq Partners startup ecosystems and a member of the BSI Associate Consultant Programme, through which it guides clients toward ISO 27001 certification with BSI. Named clients include OGold, the UAE digital precious metals investment platform with more than 1.5 million users, and Alfred Holdings, the group behind InsuranceMarket.ae.
The company positions its offering as a replacement for piecemeal security purchasing, which typically involves multiple consultants, tools and one-off projects. Its subscription bundles virtual CISO leadership, a Data Protection Officer, a delivery team of security engineers and analysts, continuous penetration testing, compliance automation and a 24/7 Security Operations Centre. Services also cover security testing, continuous monitoring, incident response, compliance support and audit evidence.
The company's pitch is set against rising regulatory and threat pressure in the UAE. Gulf News cites the UAE Cyber Security Council's estimate of approximately 600,000 attempted cyberattacks per day, and research by Positive Technologies showing the UAE accounted for 35% of recorded cyberattacks across the Gulf in the first half of 2026. Fintechs seeking CBUAE or VARA licences, healthcare providers and organisations handling personal data face compliance requirements that extend beyond written policies, a burden that can be difficult for startups and SMEs with limited budgets.
Founder and Managing Director Denis Yakimov said, "A fintech applying for a CBUAE or VARA licence is held to the same security standard as a bank, with fifteen people and no security budget." He added that the company sells "the security team, not the project," and that crossing half a million dollars in ARR in its first year without raising capital indicates the pricing is right.
Dynova's team includes professionals from Equiti, Mashreq and the UAE Banks Federation. The company is an official service provider within the Hub71 and Shorooq Partners startup ecosystems and a member of the BSI Associate Consultant Programme, through which it guides clients toward ISO 27001 certification with BSI. Named clients include OGold, the UAE digital precious metals investment platform with more than 1.5 million users, and Alfred Holdings, the group behind InsuranceMarket.ae.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.