Archlight
Archlight Solutions is a Dubai-based cybersecurity, data privacy, and GRC consulting firm serving healthcare, finance, and government organizations across the MENA and GCC regions through FTE-based professional services and managed security offerings.
- Company typePrivate
- Founded2019
- HeadquartersDubai, United Arab Emirates
- Headcount1–10
- GTM typeB2B
- OfferingServices
What Archlight does
Archlight Solutions is a privately-held cybersecurity, data privacy, and GRC consulting firm founded in 2019, headquartered in Dubai, United Arab Emirates, with a secondary US contact presence. The firm serves healthcare, finance, and government organizations across the MENA and GCC regions, delivering services through certified professionals holding CISSP, CISM, ISO 27001 Lead Auditor, CIPP, and CDPSE credentials, led by co-founders F. Abdelrahman (Cybersecurity Practice Lead) and Mohammed Y. Fadlalla (Privacy Practice Lead) with 40+ years of combined experience.
The company operates on a services-only model with no proprietary software product. Core offerings include: (1) GRC Consulting built on a proprietary 5-stage methodology (Assess, Plan, Implement, Audit, Review & Improve); (2) Managed Security Services comprising 24/7 SOC monitoring, SIEM, MDR, and DLP delivered under fully managed, hybrid, or pre-bundled models, leveraging partnerships with Microsoft, CrowdStrike, Palo Alto Networks, SentinelOne, Proofpoint, Splunk, Tenable, and Arctic Wolf; (3) an AI Governance Platform powered by partner technology Truyo covering AI inventory, risk management, and assessment automation; (4) a 5-phase penetration testing methodology covering red team, application, network, social engineering, wireless, and secure code review; and (5) certification readiness for ISO 27001, 27701, 42001, 27017, 27018, SOC 2, HITRUST, and NIST frameworks.
The business model is FTE-based professional services with publicly disclosed monthly engagement rates ranging from $7.5k (quarter-time remote) to $19k (full-time onsite) per consultant, complemented by recurring managed security services. Go-to-market is consultative, combining website content marketing, free 30-minute consultations, and direct enterprise field sales targeting regulated verticals. Archlight claims 100+ clients served, 200+ certifications achieved for clients, and a 4.9/5 client satisfaction rating.
Archlight firmographics
Firmographics- Name
- Archlight
- Legal name
- Archlight Solutions
- Website
- https://archlightsolutions.com
- Company type
- Private
- Founded year
- 2019
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Archlight Solutions is a Dubai-based cybersecurity, data privacy, and GRC consulting firm serving healthcare, finance, and government organizations across the MENA and GCC regions through FTE-based professional services and managed security offerings.
- Ownership category
- akta.pro rank
Archlight industry classification
Industry- Product category
- Cybersecurity and Data Privacy Consulting
- NAICS
- Computer Systems Design and Related Services (5415), Other Computer Related Services (541519)
- SIC
- Services-Management Consulting Services (8742), Services-Computer Programming, Data Processing, Etc. (7370), Services-Engineering, Accounting, Research, Management (8700)
- akta.pro primary industry
- Cybersecurity & Identity Consulting (BPAHAEAG)
- akta.pro secondary industries
- Security Operations Center (SOC) as a Service (BPAEADAB), Governance, Risk & Compliance (GRC) Managed Services (BPAEADAJ), Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH)
Keywords
Where Archlight is headquartered
LocationHeadquarters
- HQ city
- Dubai
- HQ country
- United Arab Emirates
- HQ region
- Middle East
Offices2 records
Markets served
Archlight business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations
Revenue model
- Professional Services Consulting: FTE-based consulting engagements with certified security and privacy professionals assigned to client engagements. Flexible resourcing models with full-time, half-time, and quarter-time commitment levels. Monthly billing with pricing varying by onsite vs remote delivery.
- Managed Security Services: Ongoing 24/7 SOC monitoring, SIEM, MDR, and DLP services delivered as a service. Turnkey security offerings with dedicated SOC delivery manager. Billed on a recurring monthly basis.
- Certification Readiness Services: Gap analysis, implementation planning, and audit support for industry certifications (ISO 27001, SOC 2, HITRUST, NIST). End-to-end support from assessment through certification maintenance.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | Full-time onsite consultant (~40 hrs/week) |
| Subscription | Monthly | Full-time remote consultant (~40 hrs/week) |
| Subscription | Monthly | Half-time onsite consultant (~20 hrs/week) |
| Subscription | Monthly | Half-time remote consultant (~20 hrs/week) |
| Subscription | Monthly | Quarter-time remote consultant (~10 hrs/week) |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels3 records
Archlight product offering
Product offeringCore offering
Archlight Solutions provides cybersecurity, data privacy, and GRC consulting services to healthcare, finance, and government organizations across the MENA and GCC regions. Core offerings include risk assessments, managed security services (SOC, SIEM, MDR, DLP), penetration testing, certification readiness (ISO 27001, SOC 2, HITRUST, NIST), and AI governance consulting. Services are delivered via flexible FTE-based engagements (full-time, half-time, quarter-time) onsite or remotely, with monthly subscription pricing.
Product overview
Archlight Solutions is a cybersecurity and data privacy consulting firm offering a portfolio of managed security services and certification readiness programs. The core offerings include: Managed Security Services (SOC as a Service, SIEM as a Service, MDR as a Service, DLP as a Service) providing 24/7 threat monitoring; Penetration Testing Services (red team, application, network, social engineering, wireless testing, secure code review); AI Governance Platform powered by Truyo (privacy automation, AI inventory, risk management, model validation); Certification Readiness programs (ISO 27001, 27701, 42001, SOC 2, HITRUST, NIST); Cybersecurity & GRC Consulting (risk assessments, vCISO services, incident response); and Data Privacy services including DPO as a Service. Engagement is delivered through flexible FTE-based consulting models (full-time, half-time, quarter-time) either onsite or remotely. The company operates exclusively as a consulting services firm, not a software product company.
Differentiator
Problem solved
Functional benefit
Products and services
- Cybersecurity and GRC Consulting Governance, Risk, and Compliance consulting for healthcare, finance, and government organizations, including security risk assessments, controls implementation, compliance program development, vCISO, and incident response mediation. Delivered by certified consultants using a structured 5-stage GRC methodology.
- Data Privacy and DPO-as-a-Service Privacy program consulting covering PDPL, GDPR, HIPAA compliance, privacy automation, and outsourced Data Protection Officer (DPO) services for organizations across healthcare, finance, and government sectors in MENA and GCC.
- AI Governance and Privacy Automation Platform Enterprise-grade privacy and AI governance platform powered by Truyo, including AI inventory, risk management, assessment automation (PIA/DPIA/TIA), model validation, post-testing evaluation, AI consent, and training capabilities, plus privacy automation (consent, DSR, data mapping, policy management).
- Certification Readiness Services Gap analysis, implementation planning, and audit support for ISO 27001, ISO 27701, ISO 42001, SOC 2 Type II, HITRUST, NIST, and cloud security certifications (ISO 27017, ISO 27018). Delivered to organizations seeking regulatory and security framework compliance.
- Managed Security Services (SOC, SIEM, MDR, DLP) 24/7 Security Operations Center (SOC) monitoring, SIEM-as-a-Service, Managed Detection and Response (MDR), and Data Loss Prevention (DLP) delivered as managed services in three delivery models: Fully Managed, Hybrid/Co-Managed, and Pre-Bundled/Customized.
- Penetration Testing Services Penetration testing services covering red team exercises, application testing (web, mobile, API), network testing, social engineering/phishing simulations, wireless security assessment, and secure code review, following a structured 5-phase methodology.
- FTE-Based Consulting Engagement Flexible FTE consulting engagements with dedicated certified security and privacy professionals available in full-time (~40 hrs/wk), half-time (~20 hrs/wk), or quarter-time (~10 hrs/wk) commitments, delivered onsite or remotely, billed monthly in USD or AED.
Quantifiable outcome
- 100+ clients served across healthcare, finance, and government
- +2 more outcomes
Companies that use Archlight
Customer profileNamed customers1 record
Segments4 records
Ideal customer profiles4 records
Archlight technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration9 records
Feature4 records
Archlight partnerships and signals
Strategic signalPartnerships
Nine partnerships are on record, tiered core.
- MicrosoftcoreCloud and security technology partnership. Microsoft Azure and security platform integrations for enterprise clients requiring cloud security assessments and ISO 27017/27018 compliance.
- CrowdStrikecoreEndpoint protection partnership providing next-generation antivirus, endpoint detection and response (EDR), and managed threat intelligence services.
- Palo Alto NetworkscoreNetwork security partnership offering next-generation firewalls, cloud security, and security operations center solutions.
- SentinelOnecoreAI-powered endpoint security partnership providing autonomous threat detection and response capabilities.
- ProofpointcoreEmail security partnership providing email protection, data loss prevention, and threat intelligence for social engineering defense.
- SplunkcoreSIEM (Security Information and Event Management) partnership providing security analytics, monitoring, and operational intelligence capabilities.
- TenablecoreVulnerability management partnership providing continuous monitoring, vulnerability assessment, and threat detection capabilities.
- Arctic WolfcoreManaged detection and response (MDR) partnership providing 24/7 security monitoring, threat detection, and incident response services.
- TruyocoreAI governance and privacy compliance platform partnership. Truyo provides enterprise-grade privacy and AI governance suite including AI inventory, risk management, assessment automation (PIA/DPIA/TIA), and model validation.
Scale indicators5 records
Recent moves6 records
Expansion highlights5 records
Archlight competitors and assessment
Company assessmentRegional players
- Cyber Knight: MENA-focused cybersecurity value-added distributor and services provider working with enterprise security vendors. Comparable as a regional security services channel player operating in the same buyer ecosystem.
- Paramount Computer Systems: UAE-based IT services and systems integrator with cybersecurity, compliance, and managed services offerings. Comparable as a regional IT services firm serving similar enterprise and government clients across MENA.
Direct peers
- DarkMatter (EDGNEX): UAE-based cybersecurity firm (now part of EDGNEX) providing cyber consulting, managed security, and compliance services to government and enterprise clients in MENA. Overlaps directly with Archlight's target verticals and service portfolio.
- HelpAG: Dubai-headquartered cybersecurity services and consulting firm serving enterprise and government clients across the Middle East. Directly comparable as a regional cybersecurity specialist offering consulting, managed security, and GRC services to the same MENA buyer base.
- CPX: Abu Dhabi-headquartered cybersecurity services firm delivering managed security, cyber defense, and advisory across the GCC. Closely comparable in geography, vertical focus, and service mix.
Broad incumbents
- Deloitte Middle East (Cyber practice): Global Big Four firm with a substantial MENA cybersecurity, privacy, and GRC consulting practice. Competes for the same enterprise and government compliance mandates at the upper end of the deal-size spectrum.
- Palo Alto Networks (Unit 42): Global cybersecurity vendor with a growing MENA consulting arm (Unit 42) that competes for incident response, GRC, and managed security work. Comparable in offering breadth and enterprise targeting, with deeper technology IP.
- KPMG Lower Gulf: Big Four advisory firm with cybersecurity and GRC services across the UAE and broader Lower Gulf. Targets the same regulated-industry buyer base as Archlight with broader portfolio offerings.
- EY MENA (Cyber practice): Big Four firm delivering cybersecurity, risk, and compliance advisory across MENA. Comparable in target verticals (financial services, healthcare, government) and regulatory-driven engagement types.
- PwC Middle East (Cyber practice): Big Four consultancy with established cybersecurity and privacy practices across the GCC serving regulated industries. Comparable in offering breadth but with materially larger bench and brand.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
Archlight social profiles
Digital presenceArchlight compliance and trust
Trust signalCompliance8 records
Archlight financial estimates
Financial estimateRevenue estimate
Valuation estimate
Archlight leadership team
Management profileNumber of profiles
Profiles2 records
Archlight funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Archlight M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Archlight
What does Archlight do?
Archlight Solutions provides cybersecurity, data privacy, and GRC consulting services to healthcare, finance, and government organizations across the MENA and GCC regions. Core offerings include risk assessments, managed security services (SOC, SIEM, MDR, DLP), penetration testing, certification readiness (ISO 27001, SOC 2, HITRUST, NIST), and AI governance consulting. Services are delivered via flexible FTE-based engagements (full-time, half-time, quarter-time) onsite or remotely, with monthly subscription pricing.
Is Archlight a public or private company?
Archlight is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Archlight founded?
Archlight was founded in 2019. It employs 1 to 10 people.
Where is Archlight based?
Archlight is headquartered in Dubai, United Arab Emirates, in the Middle East region.
How does Archlight make money?
Three revenue lines are on record. Professional Services Consulting is the primary driver. The others are managed Security Services and certification Readiness Services.
Who are Archlight's main competitors?
Regional players on record are Cyber Knight and Paramount Computer Systems. Direct peers are DarkMatter (EDGNEX), HelpAG and CPX. Broad incumbents are Deloitte Middle East (Cyber practice), Palo Alto Networks (Unit 42), KPMG Lower Gulf, EY MENA (Cyber practice) and PwC Middle East (Cyber practice).
Does Archlight have an API?
No public API is recorded for Archlight.
What industry is Archlight in?
Archlight's product category is Cybersecurity and Data Privacy Consulting. Its primary akta.pro industry code is BPAHAEAG, Cybersecurity & Identity Consulting, with a secondary code of BPAEADAB, Security Operations Center (SOC) as a Service. Its NAICS code is 5415 and its SIC code is 8742.