Get a scoped quote

The catalogue

VAPT & security testing

web, API, mobile and network penetration tests, cloud configuration reviews, continuous testing; empanelled audits via partner

  • Available now8
  • Available on request4

Available now (8)

  • 13.1Vulnerability assessmentAuthenticated automated scan + manual validation, external or internal
  • 13.2Web application penetration testManual-first, OWASP Top 10 and business-logic, grey-box; report + one retest
  • 13.3API penetration testAuth model, BOLA/IDOR, rate limiting, documented and undocumented endpoints
  • 13.5Cloud configuration reviewAWS/Azure/GCP against CIS benchmarks; IAM, storage exposure, logging
  • 13.6External network VAPTPublic IPs and exposed services
  • 13.9Retest & remediation supportVerification of fixes; remediation engineering by the hour
  • 13.11Continuous pentest subscriptionQuarterly manual test + monthly scan (7.8) + retests; ideal with hosting
  • 13.12CERT-In audit-readiness check — freeWhat the mandatory annual audit will look for, checked against your systems: a one-page gap list

Available on request (4)

  • 13.4Mobile application penetration testPer platform; storage, pinning, tamper resistance, backend in scope optional
  • 13.7Internal network / AD VAPTOn-site or VPN; assumed-breach or perimeter start
  • 13.8Secure code reviewManual + tooling on a defined module set
  • 13.10CERT-In empanelled audit via partnerCoordination and remediation; partner issues the report

We don't list anything we can't deliver.

If a line says on request, it means we have built it before and will scope it for you — not that we are hoping to.

Get a scoped quote