Security Services
Enterprise-grade cyber security consulting, testing and managed services — built by practitioners, delivered as a public good. As a non-profit, our fees fund open research and free education.
Enterprise Security Consulting
We embed with your leadership team to assess your security posture, map risks against your business objectives, and build a multi-year security roadmap. Our advisors hold CISSP, CISM and CEH credentials and bring combined decades of experience across Indian and global enterprises.
Deliverables
- ✓Executive Risk Report
- ✓Security Architecture Review
- ✓Multi-year Roadmap
- ✓Board-ready Presentations
Penetration Testing & Red Team
Our certified red team conducts comprehensive penetration tests across your web applications, APIs, mobile apps, cloud infrastructure and internal networks. We follow OWASP, PTES and OSSTMM methodologies and deliver findings with business-risk context, not just CVE numbers.
Deliverables
- ✓Detailed Technical Report
- ✓Executive Summary
- ✓Proof-of-Concept Code
- ✓Remediation Roadmap
- ✓Re-test Verification
Incident Response & DFIR
When minutes matter, our IR team deploys immediately — on-site or remote. We contain the threat, conduct digital forensics to determine blast radius, support legal and regulatory notifications, and produce a court-admissible investigation report. Retainer clients receive a guaranteed 2-hour response SLA.
Deliverables
- ✓Incident Timeline
- ✓Forensic Evidence Package
- ✓RCA Report
- ✓Legal Notification Support
- ✓Remediation Plan
Compliance & Risk Management
India's regulatory cyber landscape — CERT-In reporting rules, DPDP Act, RBI Cyber Security Framework, SEBI guidelines — is complex and rapidly evolving. We help organisations achieve and maintain compliance, conduct vendor risk assessments, and represent clients in regulatory interactions.
Deliverables
- ✓Gap Analysis Report
- ✓Policy Documentation
- ✓Audit Preparation
- ✓Vendor Risk Scorecards
- ✓Regulatory Filing Support
SOC Setup & Managed Detection
We design, deploy and optionally operate your SOC: from technology selection (SIEM, EDR, SOAR) to analyst hiring, playbook development and KPI dashboards. Our managed detection service provides 24×7 monitoring with sub-15-minute alert triage, tuned to the threat actors targeting Indian organisations.
Deliverables
- ✓SOC Architecture Blueprint
- ✓Technology Procurement Advisory
- ✓Playbook Library
- ✓Monthly Threat Reports
Government & Policy Advisory
We advise government stakeholders on cyber security policy, national strategy development, legislative drafting and critical infrastructure protection frameworks. Our research team produces policy briefs, comparative international analyses and technology-impact assessments to inform evidence-based governance.
Deliverables
- ✓Policy White Papers
- ✓Legislative Briefings
- ✓International Benchmarking
- ✓Stakeholder Workshops
- ✓Parliamentary Testimony Support
Corporate & Government Training
From cyber hygiene workshops for non-technical government staff to advanced red-team bootcamps for IT departments, we design and deliver training that changes behaviour, not just awareness scores. All programmes are available in Hindi and English, on-site or virtually.
Deliverables
- ✓Custom Curriculum Design
- ✓Instructor-led Training
- ✓Simulated Phishing Campaigns
- ✓Assessment & Certification
- ✓Ongoing e-Learning Access
Secure Product Development
We partner with software product companies, fintech startups and government technology initiatives to embed secure-by-design principles from architecture through deployment. Services include threat modelling, SSDLC process design, dependency auditing and pre-launch security assessments.
Deliverables
- ✓Threat Model Documentation
- ✓Secure Design Review
- ✓SAST/DAST Integration
- ✓Pre-launch Assessment Report
- ✓Developer Security Playbook
Not sure which service fits?
We offer free 30-minute advisory calls to help you identify the right starting point.