Sector package
Cyber security for chartered accountants and law firms
Firms hold their clients' most sensitive financial and legal data on a handful of laptops and one email domain. Attackers know it, and so does the DPDP Act.
Request a scopeWhat goes wrong in ca & law firms
- Email compromise and client impersonation
A partner's mailbox is read for months; a client receives changed payment instructions from the firm's real address.
- Ransomware before a filing deadline
Attackers time encryption to tax or court deadlines when paying looks cheaper than waiting.
- Portal credential theft
Income-tax, GST and e-filing portal credentials phished from staff.
Rules that apply to you
- DPDP Act 2023 as a data fiduciary for client personal data.
- Professional confidentiality duties under ICAI and Bar Council rules.
- CERT-In directions on incident reporting and logs.
The package
Email security and BEC prevention
Business email compromise is how Indian companies lose the most money to a single incident. We harden your domain, your mailboxes and your payment-change process so a changed bank account gets caught before it is paid.
What is included →Vulnerability assessment and penetration testing (VAPT)
Manual testing of your web apps, mobile apps, APIs, networks and cloud by people who think like the attacker, with findings ranked by what would actually be exploited first and a report your engineers can act on.
What is included →Incident response and digital forensics
Ransomware, a compromised mailbox, a data leak or an insider walking out with the database. We contain first, investigate properly, handle the CERT-In and DPDP reporting, and leave you with evidence that holds up.
What is included →Phishing simulation and employee security awareness
Realistic phishing, vishing and WhatsApp simulations with short training that changes what people do, measured over time, and built around the scams actually hitting Indian companies.
What is included →