An article by Dmitry Marinov, CTO of ANY.RUN, a UAE-based cybersecurity company.
As the MENA startup ecosystem matures, cybersecurity has shifted from a back-office concern to a boardroom topic. With investors now demanding tangible proof of security controls—and not just compliance claims—founders must treat cybersecurity as a marker of operational maturity, not an afterthought.
In 2025, MENA startups face mounting pressure to align with both domestic compliance regimes, such as the UAE’s TDRA/NCA and KSA’s SAMA/NCA frameworks, and global investor expectations tied to ISO 27001, SOC2, and GDPR-like standards.
These aren’t just policies on paper — they now demand proof of practice.
Author's summary: MENA startups must prioritize cybersecurity.