Web Application VAPT
A manual penetration test of your web application, with proof-of-concept evidence for each finding and a retest after remediation.
Manual penetration test covering authentication, authorisation and business logic
₹29,999
Every engagement lists its scope, timeline and fixed fee before checkout
Every identity in your cloud account reviewed against its actual usage, with over-permissioned roles tightened safely.
Permissions accumulate over time, from temporary production access that was never removed to a CI role given administrator rights because the correct policy was hard to define. We use access analyser and CloudTrail data to compare each identity's granted permissions with what it has actually used over 90 days, then write least-privilege policies to replace the broad ones. Nothing is tightened blindly: every change is proposed, reviewed with you and applied only where it will not break a working system.
Identity inventory and activity logs are gathered and analysed
Granted permissions measured against real usage per identity
Tightened policies drafted and reviewed with the owning teams
Changes rolled out in agreed batches with rollback ready
You provide these through the technical brief in your dashboard after checkout.
A compromised key gives an attacker far less access than it would today
Departed staff and dormant credentials are found and removed
A repeatable quarterly review your team can run independently
This is a remote engineering engagement — nothing is shipped physically. Work is delivered into systems you control. See delivery & handover and refunds & cancellation for the full terms.
A manual penetration test of your web application, with proof-of-concept evidence for each finding and a retest after remediation.
Manual penetration test covering authentication, authorisation and business logic
₹29,999
The technical controls and automated evidence collection a SOC 2 Type II audit requires, in place before the observation window begins.
Control gap assessment against the Trust Services Criteria you are scoping
₹44,999
Credentials committed to your repositories found and rotated, with automated scanning set up to stop new ones slipping in.
Full git history secret scan across up to 20 repositories
₹12,999
A practical gap assessment against India’s DPDP Act 2023, covering consent, retention, notices and breach procedures.
Personal data inventory across systems, vendors and storage locations
₹22,999
Pick the engagement that matches what you need, or tell us about the system you are working on and we will point you to the right starting place.