Protecting India's digital
infrastructure
Kardama Muni Foundation advises enterprises, government bodies and ministries on cyber security strategy — and trains the next generation of defenders through open, non-profit education.
$ nmap -sV --script=vuln target.in
PORT STATE SERVICE VERSION
443/tcp open https nginx
! CVE-2024-3120 — Critical
! Unauthenticated RCE vector
$ ./kardama-ir --engage
[+] IR team notified — ETA 2h
[+] Evidence preservation started
[+] Containment playbook loaded
$ █
Advisory, Testing & Research
Enterprise Security Consulting
Strategic security advisory for CXOs, boards and government bodies.
Learn more →Penetration Testing & Red Team
Find your weaknesses before attackers do — with rigorous, ethical offensive testing.
Learn more →Incident Response & DFIR
24/7 rapid response to contain breaches, preserve evidence and restore operations.
Learn more →Compliance & Risk Management
Navigate CERT-In mandates, IT Act obligations, ISO 27001 and RBI guidelines with confidence.
Learn more →SOC Setup & Managed Detection
Build or outsource a world-class Security Operations Center — tailored to Indian threat reality.
Learn more →Government & Policy Advisory
Cyber policy counsel for IAS officers, legislators, ministries and regulatory bodies.
Learn more →Corporate & Government Training
Hands-on cyber security training programmes for workforces, officers and technical teams.
Learn more →Secure Product Development
Build security in from the first line of code — advisory for tech founders and product teams.
Learn more →Sectors we serve
Government & IAS
Policy advisory, critical infrastructure protection and capacity building for ministries, IAS officers and state governments.
Banking & Finance
RBI/SEBI compliance, fraud detection research, SOC setup and incident response for banks, NBFCs and fintechs.
Healthcare
Patient data protection, medical device security and HIPAA/DISHA-aligned security programmes for hospitals and healthtech.
Defence & Law Enforcement
Classified-environment security consulting, digital forensics training and specialised investigations support.
Energy & Utilities
OT/SCADA security for power plants, water utilities and oil & gas — protecting the infrastructure that keeps India running.
Technology & SaaS
Secure SDLC advisory, penetration testing and pre-launch security assessments for technology companies and startups.
Impact beyond consulting
As a non-profit, we publish our research, release open tools, and engage with government and civil society to improve India's collective cyber resilience.
Project Privacy Shield
Open research and tooling that helps citizens, journalists and activists reduce their digital footprint, evade surveillance capitalism and understand their rights under the DPDP Act.
Kardama Cipher — Secure Communications
A privacy-first encrypted communication platform with end-to-end encryption, forward secrecy and metadata-resistant design, built for at-risk organisations and sensitive government use.
Kardama Shield — Mobile Security
An on-device security companion for Android that detects risky permissions, rogue Wi-Fi, known-malicious apps and stalkerware — entirely offline.
Indian Threat Intelligence Commons
An open threat intelligence feed and analysis workflow curating indicators relevant to Indian enterprises, government portals and financial institutions — shared freely with the community.
Critical Infrastructure Security
Research into the cyber resilience of India's power grid, water utilities, railway networks and financial market infrastructure — and policy recommendations for their protection.
Election Integrity & Cyber Security
Research into threats against democratic processes — disinformation campaigns, EVM security analysis, voter-data privacy and the cyber threat landscape around Indian elections.
What they say
Kardama's policy advisory team provided our ministry with a deeply researched framework for critical infrastructure protection. Their work directly shaped our state-level cyber security guidelines.
The red team assessment uncovered a critical authentication bypass that our own team had missed. The report was board-ready and the remediation support was outstanding.
Kardama's DFIR training programme is the most practical we have encountered. Our investigators are now closing cases in days that previously took weeks.
Ready to secure your organisation?
From a single penetration test to a full-year security partnership — we meet you where you are.