Sector package
Security for startups from seed to Series B
Investors ask for a security posture, enterprise customers ask for a questionnaire, and the cloud account was set up in a weekend. We get you to a defensible baseline without slowing the product down.
Request a scopeWhat goes wrong in startups
- Cloud and secrets exposure
Public buckets, leaked API keys in repositories, over-privileged service accounts.
- Customer questionnaire failures
Lost deals because nobody could answer the security section honestly.
- Founder and finance-team targeting
Payroll and vendor fraud via impersonation of the CEO on WhatsApp or email.
Rules that apply to you
- DPDP Act 2023 from day one if you hold user data.
- SOC 2 or ISO 27001 expectations from enterprise customers.
- CERT-In directions and, for fintech, RBI frameworks.
The package
Vulnerability assessment and penetration testing (VAPT)
Manual testing of your web apps, mobile apps, APIs, networks and cloud by people who think like the attacker, with findings ranked by what would actually be exploited first and a report your engineers can act on.
What is included →Managed security, SOC-as-a-service and virtual CISO
Security leadership and monitoring without a full-time hire. A named vCISO who owns the plan, and managed detection that watches your endpoints, cloud and email so someone notices before the damage spreads.
What is included →ISO 27001, SOC 2 and PCI DSS readiness
Get to a passable audit without building a paper factory. Gap assessment, a controls set sized for your company, implementation support and a dry run before the auditor arrives.
What is included →Email security and BEC prevention
Business email compromise is how Indian companies lose the most money to a single incident. We harden your domain, your mailboxes and your payment-change process so a changed bank account gets caught before it is paid.
What is included →