Skip to content
CryonityLabs_

Practice · 5 services

Security Assurance

Penetration assessments, cloud identity reviews, credential hygiene and the evidence groundwork for DPDP Act 2023, SOC 2 and ISO 27001 readiness.

₹13,999 – ₹48,999GST included

Services in this practice

A manual penetration test of the web application, each finding backed by proof-of-concept evidence, with a retest once your fixes land.

View full service

You receive

  • Hands-on testing of authentication, authorisation and business logic
  • Common web application vulnerability classes covered, together with interface-specific tests
  • CVSS ratings, with steps to reproduce and evidence attached
  • Access control probed across each role your product supports

+ 3 more on the service page

Credentials sitting in your repositories located and rotated, with scanning put in place so fresh ones stop arriving.

View full service

You receive

  • Complete version control history scanned across as many as 20 repositories
  • Working credentials confirmed and ordered for rotation by priority
  • Secrets relocated into a managed secret store
  • Dependency weaknesses reported, with an upgrade order you can actually follow

+ 3 more on the service page

Every identity in the cloud account measured against what it has actually used, with excessive roles trimmed back without breaking anything.

View full service

You receive

  • An inventory of every user, role, service identity and access key
  • Granted permissions set against 90 days of actual use
  • Least-privilege policies drafted and ready for you to apply
  • Dormant identities and unused credentials listed, alongside a plan to remove them

+ 3 more on the service page

A practical gap assessment against India's data protection law (DPDP Act, 2023), examining how consent is taken, how long data is kept, what your notices say and what follows a breach.

View full service

You receive

  • An inventory of personal data across systems, vendors and storage
  • Flow maps tracing collection, processing, sharing and deletion
  • Obligations under the Act assessed, each gap given a severity
  • Consent notices and capture reviewed, with replacement wording supplied

+ 3 more on the service page

Technical controls and automated evidence collection for a SOC 2 Type II audit, in place before the observation window starts.

View full service

You receive

  • Gap assessment covering the trust services criteria within your scope
  • Access reviews automated, producing evidence every quarter
  • Change management enforced by pull request approval, with a trail behind it
  • Logging centralised, retained for as long as the audit demands

+ 3 more on the service page

Other practices

Applied Software Systems 5 Platform Infrastructure 5 Data and Inference 5 Interaction Research 5 Systems Interchange 5 Verification Engineering 5 Operational Continuity 5 Engineering Counsel 9

Need something close to this, but not quite?

Describe the problem in a few lines. We will confirm in writing whether a listed service covers it before you pay anything.

Send a brief