Security Assurance
Credential Hygiene Sprint
Credentials sitting in your repositories located and rotated, with scanning put in place so fresh ones stop arriving.
₹13,999GST included
Security Assurance
CR-ASR-101
Application Penetration Assessment
A manual penetration test of the web application, each finding backed by proof-of-concept evidence, with a retest once your fixes land.
Timeline12 working days
Deliverables7 itemised
PracticeSecurity Assurance
Price₹32,999 incl. GST
01
The problem this solves
An automated scanner picks up the obvious and misses the costly, such as an endpoint that surrenders another customer's invoices when an identifier in the address is edited. This is manual work against common web application vulnerability classes and against your own business logic, carried out as an attacker who already holds a valid account. Reproduction steps and evidence accompany every finding, so developers act rather than argue.
02
What you receive
- Hands-on testing of authentication, authorisation and business logic
- Common web application vulnerability classes covered, together with interface-specific tests
- CVSS ratings, with steps to reproduce and evidence attached
- Access control probed across each role your product supports
- A summary written for readers without a technical background
- Remediation advice tied to your own systems, not to a template
- A retest inside 30 days at no cost, plus a summary letter for your customers
03
What changes afterwards
Weaknesses located and closed before anybody exploits them
A report fit to hand to a customer or an auditor
Fixes confirmed rather than taken on trust
04
Is it the right fit?
Ideal for
- Products holding payment details, health records or personal data
- Companies whose enterprise buyer has asked to see a test report
- Teams that have never been reviewed by an outside party
What we need from you
- Accounts covering every role, on staging or something close to production
- Authorisation to test, in writing, from someone able to grant it
- A developer we can reach quickly about a critical finding
05
Before you buy
Yes. It is in Indian rupees with 18% GST included, and it is exactly what you pay at checkout. Nothing is added afterwards for the scope listed on this page.
The working days are counted from the day we hold your payment, the completed brief and everything listed under “What we need from you”. If an input arrives late, the handover date moves by the same number of days.
Ask before you buy. We will confirm in writing whether it sits inside this scope, point you to a better-fitting service, or tell you it needs separate work.
On full payment, the code, configuration, designs and documents produced for this service belong to your organisation, as set out in our Terms.
Each unit repeats the listed scope once. It does not stretch a single unit to cover more.
Often considered alongside
Security Assurance
Cloud Identity Review
Every identity in the cloud account measured against what it has actually used, with excessive roles trimmed back without breaking anything.
₹20,999GST included
Security Assurance
Data Protection Readiness Review
A practical gap assessment against India's data protection law (DPDP Act, 2023), examining how consent is taken, how long data is kept, what your notices say and what follows a breach.
₹24,999GST included