About AccuSights
A surgeon, a bank’s security architect, and a mission to protect the businesses a nation runs on.
AccuSights was founded in Chicago by people who have defended the institutions that spend the most on security, and who watched what happens to the ones that cannot. We are now a Dubai mainland company as well, here because the Emirates has decided to hold its regulated industries to a higher standard, and because someone has to make that standard achievable.
Our mission
Protect the businesses that keep a nation running.
Hospitals, banks, exchanges, defense suppliers and the thousands of firms that serve them are the target of a new kind of asymmetric warfare: automated, relentless and indifferent to the size of the victim. Our mission is to give every one of them the security discipline of the largest institutions, delivered as one program they can afford and actually run, so that compliance becomes the by-product of being protected and the nation’s critical work never stops.
Why a falcon
The falcon sees what nothing else can, locks on one thing, and does not look away.
In the Emirates the falcon is the national bird, and falconry is a living heritage that the UAE led into UNESCO’s list of the intangible cultural heritage of humanity. We chose it for its eyes. A falcon reads a landscape from a kilometer up, picks the one movement that matters and holds it until the work is done. That is the discipline we bring to a hospital, a bank or a supplier: accurate sight across everything you run, one threat singled out from the noise, and the focus to stop it before it lands. Accurate insights, then protection.
Founder and Chief Executive Officer
Sam Khan
CISA · CRISC · B.S. Computer Science, Illinois Institute of Technology
A cybersecurity risk management professional with more than two decades inside the institutions that spend the most on security, now bringing that discipline to the businesses that cannot, and to a nation that has decided to hold its regulated industries to a higher standard.
Sam’s career runs through the places where cybersecurity is not optional: security engineering, incident response and architecture at the Federal Reserve System, then a decade of governance, risk and compliance leadership at Guggenheim Partners and as a cyber risk assessment director serving Fortune 100 organizations. He has performed on-site cybersecurity, data protection and risk assessments across banking, card networks, health insurers, credit bureaus and technology companies, the firms spending billions a year on defense, and he knows what actually works because he has tested it.
That makes him one of the senior cybersecurity risk management practitioners in financial services and healthcare, and his assessments covered a large share of the Fortune 100. He has presented cyber risk assessments to boards, to management, and to supplier-risk and risk committees, the rooms where the findings have to survive questions. For most of a decade he was also senior managing partner of a Chicago-based distributed outsourcing business, where he ran the security framework for hundreds of staff with access to regulated data across Latin America and Asia, under CISO oversight, without a breach or a major staff-related data-privacy event. That is the operating experience behind AccuSights: it is why the company can scale an AI plus human hybrid quickly and keep the discipline intact as it grows.
AccuSights began at home. Businesses in his own family, including healthcare practices, were breached with no reasonable option to protect themselves; the security the big players buy was not for sale at their size. Sam built the platform he wished they had: automated assessment, continuous monitoring and expert judgment, priced for a business of fifty people, delivered with the seriousness of a bank.
His conviction is simple and he has held it for twenty years: compliance is a by-product of running securely, never the other way round. If you are not compliant every minute, you are not compliant at all, and the audit is not the exam; the attacker is. In the UAE he has sat with the people building the national response, including a conversation with H.E. Dr. Mohamed Al Kuwaiti, Head of Cyber Security for the UAE Government, at GITEX Global 2025, and he came away certain that the country has the will and the strategy. What its regulated businesses need is a partner who can make the requirements one program. That is the work.
Co-Founder and Managing Partner
Dr. Kashmala Khalid
Physician, trained in medicine and surgery (MBBS) · Healthcare and defense programs
A doctor who watched a cyberattack stop a hospital, and decided the wire deserved the same care as the patient.
Dr. Khalid trained in medicine and surgery and worked the wards and operating theatres where minutes decide outcomes. Then, during her hospital training, a breach took the systems down. She watched the emergency department slow to paper, surgeries postponed, dialysis schedules lost, patient records and instruments and the simple act of calling another department all compromised at once. Some of the patients that week could have been saved. That is not a statistic to her; it is a memory.
She made protecting hospitals her second vocation and did it the hard way: she learned cybersecurity to the depth where she now holds her own in any technical room, and she brings to it the discipline of a surgical checklist. Nothing skipped, nothing assumed, every step verified. At AccuSights she leads the healthcare and defense programs, from the single practice to the hospital group with sites in three emirates, and she is the reason our controls are designed with clinicians rather than against them.
Ask a hospital administrator or a practice owner who they would rather have on the other end of the line when the systems go dark: a portal, or a doctor who has stood in that corridor and now knows exactly which control would have kept the lights on. There is no other cybersecurity company whose leadership has operated on a patient and now protects the systems that make surgery possible. That is not a slogan. It is her job description.
Why a doctor leads healthcare here
Who would you rather have on the line when the systems go dark?
You can sign up for a compliance platform anywhere. It will not come with someone who has stood in an operating theatre, understands why a nurse cannot wait forty seconds for a login, and knows exactly which control would have kept the emergency department running. Hospital administrators and practice owners work with Dr. Khalid because she understands the work, the motivation and the practice, and because she cares about the outcome the way they do. That is the deep touch a portal cannot offer.
The healthcare program →
Chief Commercial Officer
Panos Prezas
Electrical engineer, Illinois Institute of Technology · Innovation Director, Giant Step Capital
The partnerships engineer: twenty years of turning deep technology into commercial growth, from a national laboratory to an acquisition.
Panos spent six years at Argonne National Laboratory as an energy storage advisor to the US Department of Energy and the automotive battery consortium, then led business development at AllCell Technologies through rapid growth and its acquisition. He now serves as Innovation Director for energy storage at Giant Step Capital, a deep-tech venture firm investing in aerospace, space and frontier technologies.
At AccuSights he builds the alliances that let a regulated business get everything from one partner: enclave and cloud providers, auditors, insurers, and the channel partners who bring us to the companies that need us most.
On camera
See us on camera before you call.
From the public sessions at GITEX Global 2025, including the conversation with H.E. Dr. Mohamed Al Kuwaiti. Nothing loads from YouTube until you press play.
Governance, Risk and Compliance (GRC), simplified
The discipline the largest institutions run, sized for a business that cannot hire a department for it.
Governance, Risk and Compliance is how a bank or a hospital group decides what to protect, proves it is protected, and shows a regulator the evidence. We ran it inside those institutions. We now run it for the medium-size supplier, the clinic and the government supplier, because that is where the supply chain is thinnest and where a breach does the most damage, sometimes to more than one organization.
Governance
Who owns security, which policies are real, and what the owner signs. One page, not a binder.
Risk
What could stop the business, ranked by likelihood and cost, refreshed as the threats change, not once a year.
Compliance
The evidence a regulator, a government client or a bank asks for, produced once and kept current by the read-only compliance agent.
A supplier to a government entity or a bank is a link in a chain. A breach there is not a small-business story; it reaches the entity, its customers and the people who depend on it. The same is true, at a smaller scale, for the accounting firm that holds nine hundred client files and the clinic that holds twelve thousand patient records.
See your obligations in one picture.
Bring your licences and your questions. In thirty minutes we map which regulators and frameworks apply to you, show you the one-program approach with the read-only compliance agent, and leave you with the picture whether we work together or not.