ValueMentor
ValueMentor is a Dubai-based cybersecurity services firm offering CREST-certified penetration testing, compliance assurance (PCI DSS, HITRUST, ISO 27001), managed security, vCISO advisory, and AI security testing to enterprise clients across the Middle East, Africa, Europe, and North America, delivered via a proprietary V-Trust Methodology and Secusy GRC platform.
- Company typePrivate
- Founded2014
- HeadquartersDubai, United Arab Emirates
- Headcount101–250
- GTM typeB2B
- OfferingServices
What ValueMentor does
ValueMentor is a Dubai-headquartered cybersecurity consulting and managed security services firm founded in 2014, operating across the Middle East, Africa, Europe, and North America with a 101-250 employee base. It delivers a six-pillar portfolio: Security Testing (CREST-certified penetration testing across web, network, mobile, API, cloud, OT/IoT, plus red teaming and social engineering), Digital Trust Assurance (PCI DSS/QSA/QPA/3DS, HITRUST, HIPAA, SOC 2, ISO 27001, SWIFT CSP compliance), Digital Trust Advisory (fractional/vCISO, third-party risk management, AI and quantum risk advisory), Data Protection and Privacy (DPO-as-a-Service, regional privacy compliance including UAE PDPL, KSA PDPL, GDPR, India DPDP, with BigID integration), Managed Security (SOC-as-a-Service, MDR, SIEM, cloud security posture management), and AI Security and Assurance (AI model penetration testing, prompt injection, RAG security, adversarial ML, ISO 42001/NIST AI RMF advisory). Engagements are delivered through a proprietary V-Trust Methodology that combines PMO-led delivery, accelerators, and the Secusy AI-driven GRC platform, supported by a hybrid India-UAE operating model that compresses delivery cost while maintaining UAE-local engagement.
The firm's revenue model blends project-based professional services (pentests, audits, advisory), recurring managed security services, and subscription-based virtual CISO delivery through the Secusy platform. Pricing is custom and quote-based per engagement, with multi-year contracts and no publicly disclosed tiered pricing. GTM is sales-led and direct to enterprise buyers, supported by content marketing, SEO, social media, and free-consultation CTAs; the firm does not use reseller or marketplace channels. Customer concentration is distributed across healthcare, financial services and fintech, e-commerce and retail, government and public sector, and cloud-native organizations, with named engagements spanning hospitals, banks, fintechs, payment processors, travel platforms, healthcare technology firms, and maritime logistics.
Strategically, ValueMentor has been compounding accreditations (CREST, HITRUST, PCI QSA/QPA/3DS, DESC, ISO 27001, ISO 20000), expanding geographies, and productizing an AI security assurance practice and the Secusy platform — moves that broaden addressable regulated workload and shift a portion of revenue toward recurring models, while the underlying business remains human-delivered professional services.
ValueMentor firmographics
Firmographics- Name
- ValueMentor
- Legal name
- ValueMentor
- Website
- https://valuementor.com
- Company type
- Private
- Founded year
- 2014
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- ValueMentor is a Dubai-based cybersecurity services firm offering CREST-certified penetration testing, compliance assurance (PCI DSS, HITRUST, ISO 27001), managed security, vCISO advisory, and AI security testing to enterprise clients across the Middle East, Africa, Europe, and North America, delivered via a proprietary V-Trust Methodology and Secusy GRC platform.
- Ownership category
- akta.pro rank
ValueMentor industry classification
Industry- Product category
- Cybersecurity Services
- NAICS
- Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Computer Processing & Data Preparation (7374)
- akta.pro primary industry
- Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM)
Keywords
Where ValueMentor is headquartered
LocationHeadquarters
- HQ city
- Dubai
- HQ country
- United Arab Emirates
- HQ region
- Middle East
Markets served
ValueMentor business model
Business model- GTM type
- B2B
- Offering type
- Services
Revenue model
- Professional Cybersecurity Services: Revenue primarily generated through consulting and professional services including penetration testing, security assessments, compliance audits, and advisory engagements. Services are typically quoted per engagement based on scope, complexity, and client requirements.
- Managed Security Services: Recurring revenue through managed security services including SOC as a Service, managed detection and response, and continuous security monitoring.
- Subscription Services: Virtual CISO (vCISO) services and ongoing security programs delivered through subscription-based engagement models.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Custom engagement-based pricing |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels5 records
ValueMentor product offering
Product offeringCore offering
ValueMentor is a cybersecurity services firm delivering offensive security testing (penetration testing, red teaming, threat simulation), compliance and certification assurance (PCI DSS, HITRUST, SOC 2, ISO 27001, SWIFT CSP), virtual CISO (vCISO) advisory, managed security operations (SOC-as-a-Service, MDR), data privacy and protection, and AI/ML security assurance. Engagements are executed through its proprietary V-Trust Methodology and supported by the Secusy AI-driven governance, risk, and compliance (GRC) platform.
Product overview
ValueMentor is a cybersecurity services company offering a six-pillar portfolio: Security Testing (penetration testing, red teaming, threat simulation, social engineering, physical security, compliance-specific pen testing), Digital Trust Assurance (PCI DSS, HITRUST, SOC 2, ISO 27001, SWIFT CSP compliance), Digital Trust Advisory (vCISO services, Secusy AI-driven GRC platform, third-party risk management, AI & Quantum risk assurance), Data Protection & Privacy (DPO-as-a-Service, regional privacy compliance, BigID integration), Managed Security (SOC-as-a-Service, MDR, SIEM, cloud security), and AI Security & Assurance (AI model pen testing, prompt injection, adversarial ML, RAG security). All engagements are delivered through the proprietary V-Trust Methodology combining PMO-led delivery, delivery accelerators, and the Secusy platform.
Differentiator
Problem solved
Functional benefit
Products and services
- Security Testing Comprehensive offensive security assessment service for enterprise clients covering penetration testing, red teaming, threat simulation, social engineering, physical security testing, and continuous vulnerability management.
- Penetration Testing CREST-certified ethical hacking service that simulates real-world cyberattacks to identify and exploit vulnerabilities in systems, networks, and applications, covering external, internal, segmentation, and specialized domain-specific testing.
- Red Teaming Advanced adversary simulation service including assumed breach testing, black box testing, social engineering, physical security, threat simulation, DDoS, ransomware simulation, and phishing simulation to evaluate organizational detection and response capabilities.
- Digital Trust Assurance Compliance and certification readiness service covering payment security (PCI DSS, PCI PIN, PCI 3DS, SWIFT CSP), healthcare security (HITRUST, HIPAA), and cybersecurity compliance (SOC 2, ISO 27001, NESA), including ASV scanning, audit facilitation, and attestation services for regulated enterprises.
- Digital Trust Advisory Strategic security advisory service providing vCISO offerings (Fractional CISO, Virtual CISO Office, Secusy vCISO Platform), third-party risk management, and specialized AI & Quantum risk assurance including ISO 42001 and NIST AI RMF compliance.
- Data Protection & Privacy Privacy program development and data protection compliance service covering DPO-as-a-Service, regional privacy regulations (UAE PDPL, KSA PDPL, GDPR, India DPDP, Singapore PDPA, CCPA/CPRA), and integration with BigID for automated data discovery and governance.
- Managed Security Continuous security monitoring and operations service offering SOC-as-a-Service, Managed Detection and Response (MDR), Managed SOC/SIEM, cloud security posture management, cloud detection and response, identity and access management, and managed security awareness training.
- AI Security & Assurance Specialized AI/ML security testing service covering AI Model Penetration Testing, Prompt Injection & Prompt Leakage Testing, AI System Red Teaming, Adversarial ML Testing, RAG Security Testing, AI Data Pipeline Security Testing, LLM Application Penetration Testing, Secure AI Architecture Services, and AI Governance Risk & Compliance Consulting.
- Secusy vCISO Platform AI-driven Governance, Risk & Compliance (GRC) platform providing continuous monitoring, automated risk scoring, compliance mapping, and executive reporting, available as a standalone platform and integrated into vCISO service delivery.
Quantifiable outcome
- 70-80% increase in test coverage through automation (referenced in UAE market context)
Companies that use ValueMentor
Customer profileNamed customers11 records
Segments6 records
ValueMentor technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration4 records
AI capability3 records
Feature3 records
ValueMentor partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- EmaratechreferenceEmaratech is referenced as a client case study where ValueMentor's hybrid India-UAE delivery model helped automate security testing, resulting in 70-80% increase in test coverage. This represents a customer relationship rather than formal partnership.
Scale indicators8 records
Recent moves6 records
Expansion highlights6 records
ValueMentor competitors and assessment
Company assessmentBroad incumbents
- Mandiant (Google Cloud): Incident response and cyber consulting powerhouse (now part of Google Cloud) offering red teaming, threat intelligence, and security validation. Comparable in red team and assurance capabilities but with substantially larger brand and threat intel assets.
- Secureworks: Global MSSP providing managed detection and response, vulnerability management, and consulting. Overlaps with ValueMentor's Managed Security and security testing pillars but operates as a much larger incumbent with proprietary Taegis XDR.
- Optiv Security: Large North American cybersecurity solutions integrator offering advisory, implementation, and managed services across a broad portfolio. Overlaps with ValueMentor's advisory and managed security offerings but at much greater scale and vendor-partner breadth.
Direct peers
- Trustwave: Cybersecurity services and managed security provider with global delivery, covering penetration testing, compliance, MDR, and database security. Closely mirrors ValueMentor's six-pillar portfolio at a larger, established scale.
- Coalfire: Cybersecurity advisory firm specializing in compliance assessments (PCI DSS, HITRUST, SOC 2, FedRAMP) and technical security testing. Directly comparable to ValueMentor's Digital Trust Assurance and PCI/HITRUST assessor practice.
- NCC Group: Global cybersecurity consulting firm providing penetration testing, compliance, and managed security services. Comparable in service mix (testing + compliance + managed) and enterprise buyer profile, though at materially larger scale and public-company maturity.
- Bishop Fox: Offensive-security specialist offering penetration testing, red teaming, and adversary simulation to enterprise clients. Closely comparable to ValueMentor's CREST-certified pentest and red teaming practice, serving similar Fortune 500 buyers with similar delivery models.
- NetSPI: Specialist offensive-security and attack-surface management firm offering penetration testing, red teaming, and vulnerability management. Comparable in CREST-equivalent testing depth and enterprise buyer profile, with a more platform-enabled delivery model.
Regional players
- HelpAG: Middle East-based cybersecurity services and MSSP offering managed security, consulting, and compliance. Regional peer competing for enterprise and government clients across the GCC, with similar service portfolio mix.
- CPX Holding: UAE-headquartered cybersecurity services provider covering advisory, managed security, and compliance across the Middle East. Directly comparable regional peer competing for the same UAE enterprise and government mandates.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
ValueMentor social profiles
Digital presenceValueMentor compliance and trust
Trust signalCompliance8 records
ValueMentor financial estimates
Financial estimateRevenue estimate
Valuation estimate
ValueMentor leadership team
Management profileNumber of profiles
ValueMentor funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
ValueMentor M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about ValueMentor
What does ValueMentor do?
ValueMentor is a cybersecurity services firm delivering offensive security testing (penetration testing, red teaming, threat simulation), compliance and certification assurance (PCI DSS, HITRUST, SOC 2, ISO 27001, SWIFT CSP), virtual CISO (vCISO) advisory, managed security operations (SOC-as-a-Service, MDR), data privacy and protection, and AI/ML security assurance. Engagements are executed through its proprietary V-Trust Methodology and supported by the Secusy AI-driven governance, risk, and compliance (GRC) platform.
Is ValueMentor a public or private company?
ValueMentor is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was ValueMentor founded?
ValueMentor was founded in 2014. It employs 101 to 250 people.
Where is ValueMentor based?
ValueMentor is headquartered in Dubai, United Arab Emirates, in the Middle East region.
How does ValueMentor make money?
Three revenue lines are on record. Professional Cybersecurity Services are the primary driver. The others are managed Security Services and subscription Services.
Who are ValueMentor's main competitors?
Broad incumbents on record are Mandiant (Google Cloud), Secureworks and Optiv Security. Direct peers are Trustwave, Coalfire, NCC Group, Bishop Fox and NetSPI. Regional players are HelpAG and CPX Holding.
Does ValueMentor have an API?
No public API is recorded for ValueMentor.
What industry is ValueMentor in?
ValueMentor's product category is Cybersecurity Services. Its primary akta.pro industry code is BPAKAHAM, Data Security & Privacy Services (DLP, Encryption, Privacy Ops). Its NAICS code is 561621 and its SIC code is 7374.