CyberArrow

CyberArrow provides cybersecurity compliance and GRC (governance, risk, and compliance) software. Its platform is designed to help organizations manage security compliance requirements and build cybersecurity programs, identifying and closing compliance gaps before they result in security incidents. The company serves customers ranging from startups to large enterprises and government entities, and counts Emirates Airlines, American Express and Bupa among its enterprise clients.

The product line consists of three offerings. CyberArrow GRC is described as a GRC operating system for managing governance, risk and compliance work. CyberArrow Awareness delivers security awareness training programmes intended to build what the company terms "cyber instincts" within customer organisations. CyberArrow Phishing runs phishing simulations and training, with the stated aim of developing employees into what the company calls "human firewalls".

The platform supports more than 20 international and regional standards, among them ISO 27001, SOC 2, PCI DSS, GDPR, HIPAA, NIST CSF, NIS2, DORA and FedRAMP, alongside Middle Eastern frameworks such as SAMA, NCA ECC-2:2024 and UAE IA. This breadth of coverage spans regulatory requirements in sectors including aviation, financial services, healthcare and insurance, and government.

CyberArrow has a geographic presence covering the Middle East, Africa, Europe, North America, Asia-Pacific and Latin America. Further details on its founding, headcount and funding are not published.