About AccuSights
A surgeon, a bank’s security architect, and a mission to protect the businesses a nation runs on.
AccuSights was founded in Chicago by people who have defended the institutions that spend the most on security, and who watched what happens to the ones that cannot. We serve US businesses from 5 to 500 people, the ones attackers count on being easy, and since 2026 we also operate as a Dubai mainland company serving the Gulf. Same people, same standard, one program.
Our mission
Protect the businesses that keep a nation running.
Hospitals, banks, exchanges, defense suppliers and the thousands of firms that serve them are the target of a new kind of asymmetric warfare: automated, relentless and indifferent to the size of the victim. Our mission is to give every one of them the security discipline of the largest institutions, delivered as one program they can afford and actually run, so that compliance becomes the by-product of being protected and the nation’s critical work never stops.
Why the two of us
A security architect from the institutions that spend the most, and a surgeon who watched a hospital go dark.
It is an unlikely pair. It is also exactly why the product came out uncluttered. Neither of us came from a venture-backed software company that has to add a module every year to raise the next round. One of us spent twenty years being the person who had to sit in front of a board and say what was actually true. The other spent her training learning that the step you skip is the one that costs somebody.
Put those two instincts in the same room and you do not get a platform with forty features. You get an argument about which five controls actually stop the attack, and then you ship those. Both of us are motivated by the same business: the practice, the shop, the firm that cannot afford the thing the large institutions never have to think about.
There is a pattern in this market that neither of us will run. Software priced by module, so the control you actually needed sits in the tier above. Badges sold as security, which is a certificate saying you were fine on one Tuesday in March. A portal instead of a person, so at three in the morning you are talking to a form. Pricing hidden behind a demo. What we do instead is boring on purpose: the smallest number of controls that actually stop attacks, in plain English, at a published price, with a named human on the other end.
The people
Founder and Chief Executive Officer
Sam Khan
CISA · CRISC · B.S. Computer Science, Illinois Institute of Technology
More than two decades inside the institutions that spend the most in the world on security, spent mostly being the person who had to walk into a board room and say what was actually true.
Sam’s career runs through the places where cybersecurity is not optional: security engineering, incident response and architecture at the Federal Reserve System, then a decade of governance, risk and compliance leadership at Guggenheim Partners and as a cyber risk assessment director serving Fortune 100 organizations. He has performed on-site cybersecurity, data protection and risk assessments across banking, card networks, health insurers, credit bureaus and technology companies. He will not tell you which ones. He signed something, so the clients stay described by sector and nothing more.
The work is less glamorous than it sounds. You look for the admin account that should have been closed years ago and still opens the door. You test the backup nobody has ever restored. You read the exception somebody granted for two weeks and never took back. Then you carry the finding into a room, a board, a management committee, a supplier risk committee, and you say the true thing out loud in front of the people who paid for the work and would have preferred a different answer. Sam did that across a large share of the Fortune 100. He is CISA and CRISC certified with a B.S. in Computer Science from the Illinois Institute of Technology. The certifications are not the point. The habit is.
For most of a decade he was also senior managing partner of a Chicago-based distributed outsourcing business. He designed and ran the security framework for hundreds of staff across Latin America and Asia who handled regulated data every working day, under CISO oversight. No breach. No major staff-related data privacy event. That is a different kind of proof from an assessment report: he was not grading somebody else’s program, he had to live inside his own.
AccuSights began at home, and this is the part Sam does not tell from a stage. Businesses in his own family, including healthcare practices, were breached, and one of them was a payroll breach: the money people were counting on that Friday, in a business run by people he has known his whole life. He had spent twenty years telling the largest institutions in the country how to stop exactly that. He went looking for something his family could buy and found nothing reasonable at their size, because what a bank takes for granted was not for sale to a fifty-person company. That is why the promise on our home page is the one it is. Take the vacation you earned, land, and payroll is still there. Three convictions he has held for twenty years run through everything the company sells. Compliance is a by-product of running securely, never the reverse. If you are not compliant every minute, you are not compliant at all. And the audit is not the exam; the attacker is.
Co-Founder and Managing Partner
Dr. Kashmala Khalid
Physician, trained in medicine and surgery (MBBS) · Healthcare and defense programs
A doctor who watched a cyberattack stop a hospital, and decided the wire deserved the same care as the patient.
Dr. Khalid trained in medicine and surgery and worked the wards and operating theatres, where the unit of time that matters is the minute. Then, during her hospital training, a breach took the systems down. Not a line in a report somewhere. The building. The emergency department slowed to paper, surgeries were postponed, dialysis schedules were lost, and patient records, instruments and the simple act of calling another department were compromised in the same hour. That is not a statistic to her; it is a memory.
Clinicians are trained to keep working when the equipment fails, and she did. What she did afterwards is the unusual part. She made protecting hospitals her second vocation and learned cybersecurity to the depth where she holds her own in any technical room, with any engineer in it, and she brought the discipline of surgery with her. Nothing skipped, nothing assumed, every step verified, because a checklist you skip is a patient you lose. At AccuSights she leads the healthcare and defense programs, from the single practice to the hospital group with sites in three emirates, and she is the reason our controls are designed with clinicians rather than against them.
Ask a hospital administrator or a practice owner who they would rather have on the other end of the line when the systems go dark: a portal, or a doctor who has stood in that corridor and now knows exactly which control would have kept the lights on. There is no other cybersecurity company whose leadership has operated on a patient and now protects the systems that make surgery possible. That is not a slogan. It is her job description.
Why a doctor leads healthcare here
Who would you rather have on the line when the systems go dark?
You can sign up for a compliance platform anywhere. It will not come with someone who has stood in an operating theatre, understands why a nurse cannot wait forty seconds for a login, and knows exactly which control would have kept the emergency department running. Hospital administrators and practice owners work with Dr. Khalid because she understands the work, the motivation and the practice, and because she cares about the outcome the way they do. That is the deep touch a portal cannot offer.
The healthcare program →
Chief Commercial Officer
Panos Prezas
Electrical engineer, Illinois Institute of Technology · Innovation Director, Giant Step Capital
The partnerships engineer: twenty years of turning deep technology into commercial growth, from a national laboratory to an acquisition.
Panos spent six years at Argonne National Laboratory as an energy storage advisor to the US Department of Energy and the automotive battery consortium, then led business development at AllCell Technologies through rapid growth and its acquisition. He now serves as Innovation Director for energy storage at Giant Step Capital, a deep-tech venture firm investing in aerospace, space and frontier technologies.
At AccuSights he builds the alliances that let a regulated business get everything from one partner: enclave and cloud providers, auditors, insurers, and the channel partners who bring us to the companies that need us most.
Why we do this
Five things we would say the same way at a board table or a kitchen table.
- AccuSights began at home. Businesses in Sam’s own family, including healthcare practices, were breached, one of them losing a payroll, and what the large institutions buy was not for sale at their size.
- A checklist you skip is a patient you lose. Dr. Khalid learned that in surgery, and it is how she builds a control set.
- Compliance is a by-product of running securely. Never the reverse.
- If you are not compliant every minute, you are not compliant at all.
- The audit is not the exam. The attacker is.
Why us
Five facts, not five claims.
- Our founder spent more than two decades assessing banks, card networks, health insurers, credit bureaus and technology companies on site, then presenting the findings to their boards and risk committees. The standard we hold you to is the one we held them to.
- Our healthcare and defense programs are led by a physician trained in medicine and surgery who watched a breach empty an emergency department. Our controls get designed with clinicians instead of against them.
- Our price is on the page. Protect starts at $25 per user per month and you can read that number without booking a demo first.
- Sam ran the security framework for hundreds of staff across Latin America and Asia handling regulated data every working day, under CISO oversight, with no breach and no major staff-related data privacy event. We have operated a program, not only audited them.
- Neither founder came from a venture-backed software company that has to add a module every year to raise the next round. Nobody here gets paid to sell you a tier you do not need.
The people attacking a 30-person business are automated, patient and indifferent to who they hurt. What keeps this team going is one idea: nobody who works hard for their business should lose it because someone overseas tricked one employee into clicking a link. Never too big or too small.
The good guys, protecting businesses from the bad guys
See us on camera before you call.
The founder story, and the short clips we make for owners who have three minutes, not three hours. Nothing loads until you press play.
The asymmetric fight
The Cyber Expert in times of peace. Something else entirely when someone comes for a client.
The people attacking a 30-person business are automated, patient and indifferent to who they hurt. What keeps this team going is one idea: nobody who works hard for their business should lose it because someone overseas tricked one employee into clicking a link. That is the fire, and it is contagious. Never too big or too small. Let's talk about your cyber anxieties.
Governance, Risk and Compliance (GRC), simplified
The discipline the largest institutions run, sized for a business that cannot hire a department for it.
Governance, Risk and Compliance is how a bank or a hospital system decides what to protect, proves it is protected, and shows a regulator the evidence. We ran it for those institutions. We now run it for the 30-person supplier, the medical practice and the defense subcontractor, because that is where the supply chain is thinnest and where a breach does the most damage, sometimes to more than one company.
Governance
Who owns security, which policies are real, and what the owner signs. One page, not a binder.
Risk
What could stop the business, ranked by likelihood and cost, refreshed as the threats change, not once a year.
Compliance
The evidence a regulator, a prime contractor or a customer asks for, produced once and kept current every day.
A defense contractor with 40 people is a link in a national supply chain. A breach there is not a small-business story; it is a national-security one. The same is true, at a smaller scale, for the accounting firm that holds 900 client returns and the clinic that holds 12,000 patient records.
Talk to the team
Thirty minutes with an engineer, not a salesperson. Bring your questions; leave with a picture of where you stand and what would change first.