What's included
- Hardening of servers, network devices, firewalls and cloud accounts
- Vulnerability scanning and patch tracking
- Access reviews and privileged-access controls
- Log collection and monitoring, incident response support
- Readiness for India's DPDP Act and ISO 27001: gap assessment, policies, evidence
- Penetration tests through a CERT-In-empanelled partner
The security cycle
Text version of this diagram
- Assess risks → Protect: harden, patch, control access
- Protect: harden, patch, control access → Detect: logs and alerts
- Detect: logs and alerts → Respond and recover
- Respond and recover → Assess risks
Who it's for
- Companies preparing for an audit or a customer's security questionnaire
- Businesses handling personal data under the DPDP Act
- Teams unsure where they're exposed
What you get
- Gap assessment ranked by risk
- Hardening and patch plan
- Policies and evidence for audits
- Quarterly review
Questions
Where should a small company start?
MFA everywhere, patching, backups you've tested, and an access review. We can do all four in weeks.
Can you help with an audit?
Yes: we prepare the evidence and fix the gaps found.
Do you certify us for ISO 27001?
No: certification is done by an accredited body; we help you get ready and fix the gaps.