Cyber security services in Kolkata and across India

Security work only compounds when it runs in that order. An assessment establishes what matters and what is exposed. Hardening closes the routine gaps in identity, endpoints, email and network segmentation. Testing verifies the result with people who did not build it. Response planning covers the day something gets through anyway.

Buying a tool before doing the assessment is the most common way Indian mid-market organisations spend a security budget without reducing risk.

We run all four disciplines here, so findings from a penetration test flow into a remediation plan and into the incident playbook rather than sitting in a PDF.

The CERT-In directions issued in April 2022 require covered entities to report listed cyber incident types within six hours of noticing them, to retain logs within India for a specified period, and to synchronise system clocks to NIC or NPL time servers.

The Digital Personal Data Protection Act 2023, operationalised by the DPDP Rules notified in November 2025, requires reasonable security safeguards, defined retention, notification to affected individuals and reporting of personal data breaches to the Data Protection Board, with obligations phasing in over the months following notification.

Sector rules add more, such as the SEBI cyber security and cyber resilience framework for market intermediaries. We map one set of controls against all applicable frameworks rather than running parallel programmes.

The pattern repeats across organisations of every size: administrator accounts without multi-factor authentication, a flat network where one compromised laptop reaches everything, backups that have never been restored, and a domain with no enforced DMARC policy, letting anyone send mail as your company.

Applications typically fail on authorisation rather than on exotic vulnerabilities, which matches broken access control sitting at the top of the OWASP Top 10 for 2025.

None of these are expensive to fix. They are simply unowned, which is why we hand over a plan with named owners and dates rather than a findings list. Assigning someone to patching is usually worth more than the next appliance in the budget.

For an active incident, containment and evidence preservation come before rebuilding. Wiping the machines answers nothing about how entry was gained or whether the attacker still has access, and those are the questions your customers and any regulator will ask.

We also recover data from failed and damaged media, including drives, arrays and phones, which frequently matters more than anything else on the day.

Recovery is then staged into a clean, segmented environment and verified before anything returns to service, because restoring a backup carrying the same implant simply restarts the incident. For urgent situations call +91 82749 59326 or write to [email protected] and we will triage before anything else is decided.