---
title: "VAPT & security testing — Divyavyoma"
description: "web, API, mobile and network penetration tests, cloud configuration reviews, continuous testing; empanelled audits via partner"
url: "https://divyavyoma.com/cloud/vapt-security-testing"
---

The catalogue

# VAPT & security testing

web, API, mobile and network penetration tests, cloud configuration reviews, continuous testing; empanelled audits via partner

-   Available now**8**
-   Available on request**4**

## Available now (8)

-   13.1Vulnerability assessmentAuthenticated automated scan + manual validation, external or internal
-   13.2Web application penetration testManual-first, OWASP Top 10 and business-logic, grey-box; report + one retest
-   13.3API penetration testAuth model, BOLA/IDOR, rate limiting, documented and undocumented endpoints
-   13.5Cloud configuration reviewAWS/Azure/GCP against CIS benchmarks; IAM, storage exposure, logging
-   13.6External network VAPTPublic IPs and exposed services
-   13.9Retest & remediation supportVerification of fixes; remediation engineering by the hour
-   13.11Continuous pentest subscriptionQuarterly manual test + monthly scan (7.8) + retests; ideal with hosting
-   13.12CERT-In audit-readiness check — **free**What the mandatory annual audit will look for, checked against your systems: a one-page gap list

## Available on request (4)

-   13.4Mobile application penetration testPer platform; storage, pinning, tamper resistance, backend in scope optional
-   13.7Internal network / AD VAPTOn-site or VPN; assumed-breach or perimeter start
-   13.8Secure code reviewManual + tooling on a defined module set
-   13.10CERT-In empanelled audit via partnerCoordination and remediation; partner issues the report

We don't list anything we can't deliver.

If a line says on request, it means we have built it before and will scope it for you — not that we are hoping to.

[Get a scoped quote](https://divyavyoma.com/pricing#scoping-form)

## [What we run](https://divyavyoma.com/#what-we-run)

-   [Quality assurance & testingmanual QA, test automation, API and performance testing, release regression, embedded QA engineers](https://divyavyoma.com/cloud/quality-assurance-testing)
-   [Professional servicesarchitecture and placement reviews, migrations, hardening, DPDP readiness, fractional infrastructure lead](https://divyavyoma.com/cloud/professional-services)