The complete cyber security services catalogue

• Vulnerability assessment. Scan servers, devices, operating systems, applications and network infrastructure for known weaknesses.
• Configuration and hardening audit. Verify systems, databases, cloud resources and network devices against secure baselines.
• Active Directory security assessment. Identify domain privilege escalation paths and identity attack exposure.
• Cloud security assessment. Review configurations, permissions, public exposure, encryption and logging.
• Wireless security assessment. Test corporate Wi-Fi, guest networks, authentication and unauthorised access points.
• Source code security review. Analyse code for vulnerabilities, insecure dependencies and dangerous patterns.
• External attack surface management. Continuously discover internet exposed systems, forgotten domains and open ports.
• Continuous threat exposure management. Discover, prioritise, validate and drive remediation of exploitable exposure.

• Zero Trust readiness assessment. Evaluate identity, network, device, data and application maturity.
• Zero Trust architecture design. Target architecture, trust boundaries, policy engines, enforcement points and integrations.
• Implementation roadmap. Phased adoption based on critical business resources and risk.
• Zero Trust network access. Replace broad network access with policy controlled access to specific applications.
• Microsegmentation. Restrict workload to workload communication so lateral movement stops at the first server.
• Identity centric security. Strong authentication, identity assurance, conditional access and least privilege.
• Continuous device trust. Check compliance, endpoint health and posture before access is granted.
• Software defined perimeter, SASE and SSE. Reduce application exposure and deliver security to distributed users and branches.
• Zero Trust for cloud, third parties and OT or IoT. Workload identities, scoped vendor access and zoning for connected devices.
• Continuous trust verification. Reassess sessions when posture, behaviour, location or risk changes.

Our approach: start with critical applications, identity security and device visibility, then expand to segmentation, data controls and continuous verification. It is an architectural transformation, not a single product.

• Deception readiness assessment. Identify high value attack paths and where decoys improve detection most.
• Enterprise deception architecture. Design a deception environment aligned to critical assets, segments and attacker behaviour.
• Honeypot and honeynet deployment. Isolated decoy systems, and interconnected decoy environments for richer intrusion insight.
• Honeytoken deployment. Monitored decoy credentials, documents, API keys and database records.
• Active Directory deception. Decoy accounts and identity artefacts that expose domain reconnaissance and misuse.
• Ransomware deception. Monitored decoy files and shares that reveal suspicious encryption or file access behaviour.
• Cloud and database deception. Controlled decoy cloud assets, secrets, records and connection artefacts.
• OT and IoT deception. Safely isolated industrial protocol and IoT decoys that do not touch production processes.
• Deception to SIEM integration. Send deception alerts into your SOC, SIEM, XDR and incident workflow.
• Managed deception as a service. Continuous operation, tuning, rotation and monitoring of deception assets.
• Deception effectiveness testing. Validate decoy realism, alert fidelity, coverage and operational safety.

Important: deception complements endpoint, identity and network security rather than replacing them, and decoys are isolated so they can never become a pathway into production.

• Identity and access management. Centralise identities, permissions and authentication across business systems.
• Multi factor authentication. Additional factors, preferably phishing resistant ones for sensitive access.
• Single sign on. Centrally managed authentication across multiple applications.
• Privileged access management. Vaulting, approvals and monitoring for administrator and service accounts.
• Privileged session management. Record, monitor and control sensitive administrative sessions.
• Identity governance and administration. Lifecycle, role assignment, access reviews and segregation of duties.
• Passwordless authentication. Passkeys, FIDO2 security keys and other strong mechanisms.
• Conditional access. Adjust access by user risk, device compliance and application sensitivity.
• Customer identity and access management. Secure registration, login, account recovery and identity verification.
• Non human identity security. Discover and protect service accounts, API keys and workload credentials.
• Identity threat detection and response. Detect credential abuse, misconfiguration and privilege escalation.

• Next generation firewall. Application aware filtering with threat prevention and traffic inspection.
• Firewall rule review. Find overly permissive, redundant, outdated or risky rules.
• Intrusion detection and prevention. Detect and, where appropriate, block malicious traffic.
• Network access control. Verify and restrict devices connecting to corporate networks.
• Network segmentation. Separate business systems, sensitive environments and untrusted networks.
• DDoS protection. Keep internet facing services available under distributed attack.
• DNS security and secure web gateway. Block malicious domains and control employee web access and downloads.
• Remote access security. Secure employee, contractor and administrator access through VPN or ZTNA.
• SD-WAN and wireless security. Protect branch connectivity, corporate Wi-Fi, authentication and guest access.
• Network security architecture review. Evaluate trust boundaries, exposed services, traffic flows and resilience.

• Endpoint protection platform. Protect laptops, desktops and servers against known malware and malicious activity.
• Endpoint detection and response. Continuous monitoring with investigation, isolation and remediation.
• Managed EDR. We operate the tooling with analyst monitoring and authorised response.
• Mobile device management and unified endpoint management. One policy framework for laptops, desktops and mobiles.
• Patch management. Prioritise, test and deploy security updates to reduce exploitable weakness.
• Server hardening. Secure configuration, removal of unnecessary services and tighter access.
• Application allowlisting. Restrict execution to approved software and trusted behaviour.
• USB and peripheral control. Control removable storage and devices that could introduce malware or leak data.
• Endpoint encryption. Encrypt stored information and manage recovery keys securely.
• Asset discovery and inventory. Identify devices, software, ownership, exposure and security status.

• Cloud security posture management. Continuous checks for misconfiguration, public exposure and weak encryption.
• Cloud infrastructure entitlement management. Find and reduce excessive permissions across cloud accounts.
• Container and Kubernetes security. Image scanning, runtime protection, registry hygiene and cluster hardening.
• Infrastructure as code security. Catch insecure templates before they ever reach an environment.
• CI/CD pipeline security. Protect build systems, secrets and artefacts in the software supply chain.
• Secrets management. Remove hard coded credentials and move them into controlled storage with rotation.
• Cloud workload protection. Runtime visibility and threat detection for virtual machines and serverless workloads.
• Multi cloud architecture review. Consistent policy, logging and identity across more than one provider.

• Data discovery and classification. Locate regulated and sensitive data across endpoints, servers and cloud storage.
• Data loss prevention. Policy controls on email, web, removable media and cloud sharing.
• Encryption and key management. Protect data at rest and in transit with managed key lifecycle.
• Data masking and tokenisation. Reduce exposure in development, analytics and third party sharing.
• Backup security and immutability. Backups an attacker cannot quietly delete or encrypt.
• Privacy programme implementation. Inventories, consent, retention schedules and data subject request handling.
• Database activity monitoring. Watch privileged queries and bulk extraction from critical databases.
• Secure data disposal. Verified destruction for devices, media and archived records.

• Secure software development lifecycle. Build security into requirements, design, build and release.
• Application threat modelling. Map abuse cases and trust boundaries before a line of code is written.
• Static and dynamic testing. Analyse source code and running applications for exploitable flaws.
• Software composition analysis. Track vulnerable and unsupported open source dependencies.
• API discovery and protection. Find undocumented APIs and enforce authorisation and rate limits.
• Web application firewall tuning. Rules that block real attacks without blocking real customers.
• Bot and fraud mitigation. Credential stuffing, scraping and automated abuse controls.
• Developer security training. Practical sessions built around the flaws we actually found in your code.

• Incident response retainer. A contracted team, agreed response times and a named escalation path.
• Incident response plan and playbooks. Written, tested procedures for the scenarios most likely to hit you.
• Breach investigation. Determine entry point, scope, dwell time, data accessed and attacker actions.
• Digital forensics. Evidence handling that stands up to auditors, insurers and courts.
• Malware analysis. Understand what the sample does, what it talked to and what it left behind.
• Compromise assessment. Answer the question of whether you are already breached and did not know.
• Regulatory incident reporting support. Assistance with CERT-In and sector regulator notification requirements.
• Tabletop exercises. Rehearse the decisions with the executives who will actually have to make them.

• Ransomware readiness assessment. Test the controls, the backups and the plan against a realistic scenario.
• Attack path hardening. Close the exact routes ransomware operators use: remote access, credentials and backups.
• Immutable and offline backup design. Recovery that survives an attacker with administrator rights.
• Early encryption detection. Behaviour based detection plus decoy files that trigger on first encryption attempt.
• Containment and eradication. Isolate, remove persistence and verify the environment is clean.
• Recovery and restoration. Prioritised restoration of the systems the business cannot run without.
• Post incident review. Honest root cause analysis and a remediation plan with owners and dates.

• Email security gateway. Filtering for phishing, spam, malicious links and weaponised attachments.
• Business email compromise protection. Detect impersonation of executives, vendors and payment instructions.
• SPF, DKIM and DMARC implementation. Stop other people sending email as your domain.
• Attachment sandboxing. Detonate unknown files safely before they reach a user.
• Microsoft 365 and Google Workspace hardening. Secure defaults, auditing, and controls on forwarding and sharing.
• Collaboration platform security. Protect file sharing and messaging channels from data leakage.
• Phishing simulation. Measure real click rates and improve them with targeted coaching.

• OT asset discovery. Passive identification of controllers, sensors and engineering workstations.
• IT and OT segmentation. Zones and conduits that keep an office compromise out of the plant floor.
• ICS and SCADA security assessment. Safe, production aware review of industrial control environments.
• OT threat monitoring. Protocol aware detection that understands what normal looks like in a plant.
• Secure remote access for vendors. Controlled, recorded maintenance sessions instead of open connections.
• IoT device security. Inventory, hardening and network isolation for connected devices.
• Safety aligned incident response. Procedures written with the people responsible for physical safety.

• Threat intelligence platform. Collect, correlate and distribute intelligence from dark web, deep web, surface web, open feeds and internal logs.
• Dark web monitoring. Leaked credentials, stolen data and criminal chatter involving your organisation.
• Brand and domain protection. Detect look alike domains and fraudulent applications, and support takedown.
• Executive exposure monitoring. Reduce the personal data that makes targeted attacks easy.
• Proactive threat hunting. Hypothesis driven searches through your telemetry for quiet intrusions.
• Sector specific intelligence briefings. What is currently hitting banks, hospitals or government bodies in your region.
• Indicator and detection feed integration. Turn intelligence into working detection rules, not another report.

• Vendor security assessment. Risk based due diligence before and during a supplier relationship.
• Continuous third party monitoring. External posture and breach signals for critical vendors.
• Contract security requirements. Clear security, audit and breach notification clauses.
• Software supply chain security. Software bill of materials review and dependency risk management.
• Fourth party exposure mapping. Understand who your vendors depend on.
• Vendor access control. Narrow, monitored, time bound access instead of standing accounts.

• Role based awareness programmes. Different content for finance, developers, administrators and leadership.
• Phishing and vishing simulation. Realistic campaigns with coaching instead of blame.
• Executive and board briefings. Cyber risk explained in business language.
• Secure development training. Practical sessions for engineering teams.
• Administrator hardening workshops. For the people who hold the keys.
• Induction and refresher modules. Short, regular and measurable.

• Regulatory alignment. Control mapping and evidence for RBI, SEBI, IRDAI and CERT-In expectations.
• PCI DSS readiness. Scope reduction, gap assessment and remediation for cardholder data environments.
• Payment channel security review. UPI, cards, net banking, mobile banking and ATM infrastructure.
• Core banking environment hardening. Segmentation, privileged access and monitoring around core systems.
• Digital banking application testing. Web and mobile VAPT with business logic and fraud scenarios.
• Deception around financial systems. Decoy accounts and records that expose reconnaissance of money flows.
• Fraud and anti money laundering support. Detection signals shared between security and fraud teams.

• Citizen data protection. Classification, access control and monitoring for large public datasets.
• Critical infrastructure protection. Security for systems whose failure affects public services.
• Security audit support. Preparation and evidence for departmental and empanelled audits.
• Smart city and surveillance system security. Camera networks, command centres and connected infrastructure.
• Air gapped and isolated network assessment. Including physical layer testing from our hardware programme.
• Incident reporting and coordination. Aligned to national reporting requirements and timelines.
• Capacity building. Training departmental teams to operate controls after handover.

• AI usage governance. Policy for what staff may send to which tools, with monitoring to match.
• LLM application security testing. Prompt injection, data leakage, insecure output handling and tool abuse.
• Model and data pipeline security. Protect training data, model artefacts and inference infrastructure.
• AI assisted attack readiness. Defences tuned for faster, more convincing phishing and social engineering.
• Shadow AI discovery. Find the AI services already in use across the organisation.
• Emerging technology risk reviews. Assessment of new platforms before they go into production.

• Business impact analysis. Identify the processes and systems the organisation cannot run without.
• Continuity and disaster recovery planning. Realistic recovery time and recovery point objectives.
• Backup strategy review. Verify that what you back up is what you can actually restore.
• Recovery testing. Prove the plan works before an incident proves it does not.
• Crisis communication planning. What you tell customers, regulators and staff, and who says it.
• Resilience maturity assessment. Benchmark readiness and build an improvement roadmap.