UAE fintechs turn to subscription security to meet strict VARA licensing rules

Dubai-based cybersecurity startup Dynova surpassed $500,000 in annual recurring revenue (ARR) during its first year of operations on Thursday, 15 October, achieving profitability without external venture capital funding. The company, founded by former security leaders from Mashreq and the UAE Banks Federation, provides a "security team as a service" model for startups and SMEs. Subscriptions start at $2,500 per month and consolidate functions typically requiring multiple hires or consultants, including a virtual Chief Information Security Officer (vCISO), a Data Protection Officer, and 24/7 Security Operations Centre (SOC) monitoring. Rising Demand Amid Regional Threats The company’s growth follows a sharp increase in regional cyber activity. Data from the UAE Cyber Security Council shows the country faces approximately 600,000 attempted cyberattacks daily. Research from Positive Technologies further indicates that the UAE accounted for 35% of all recorded cyberattacks in the Gulf region during the first half of 2026. Increasingly stringent regulatory requirements from the Central Bank of the UAE (CBUAE) and the Virtual Assets Regulatory Authority (VARA) have also driven demand. Fintech firms and healthcare providers are now mandated to implement practical security measures that go beyond simple policy documentation to secure and maintain operating licences. Subscription Model Replaces Traditional Hiring “A fintech applying for a CBUAE or VARA licence is held to the same…