Security Assurance
Application Penetration Assessment
A manual penetration test of the web application, each finding backed by proof-of-concept evidence, with a retest once your fixes land.
₹32,999GST included
Security Assurance
CR-ASR-103
Audit Evidence Foundation
Technical controls and automated evidence collection for a SOC 2 Type II audit, in place before the observation window starts.
Timeline30 working days
Deliverables7 itemised
PracticeSecurity Assurance
Price₹48,999 incl. GST
01
The problem this solves
A SOC 2 audit rests on evidence: that access was reviewed, that changes were approved, that a backup was restored, that logs were kept, across months rather than days. Assembling all of that after the window opens is painful. We put the technical controls in first, automate access reviews, enforce change management through pull request approval, centralise logging with retention and set response times for vulnerabilities by severity, gathering evidence automatically wherever it can be.
02
What you receive
- Gap assessment covering the trust services criteria within your scope
- Access reviews automated, producing evidence every quarter
- Change management enforced by pull request approval, with a trail behind it
- Logging centralised, retained for as long as the audit demands
- Vulnerability workflow with response times fixed by severity
- Backup, restore and recovery exercises carried out and evidenced
- A runbook mapping evidence collection control by control
03
What changes afterwards
Evidence builds up by itself instead of being reconstructed later
Controls are already operating when the window opens
Fewer findings to clear, keeping the audit on its subject
04
Is it the right fit?
Ideal for
- Companies whose enterprise deals keep stalling at the security questionnaire
- Startups on the point of opening an observation window for SOC 2 Type II
- Teams holding a compliance platform with nobody to do the engineering
What we need from you
- Administrator rights across cloud, identity and code repositories
- A compliance owner named on your side
- The auditor or compliance platform you have chosen, if that is settled
05
Before you buy
Yes. It is in Indian rupees with 18% GST included, and it is exactly what you pay at checkout. Nothing is added afterwards for the scope listed on this page.
The working days are counted from the day we hold your payment, the completed brief and everything listed under “What we need from you”. If an input arrives late, the handover date moves by the same number of days.
Ask before you buy. We will confirm in writing whether it sits inside this scope, point you to a better-fitting service, or tell you it needs separate work.
On full payment, the code, configuration, designs and documents produced for this service belong to your organisation, as set out in our Terms.
Each unit repeats the listed scope once. It does not stretch a single unit to cover more.
Often considered alongside
Security Assurance
Credential Hygiene Sprint
Credentials sitting in your repositories located and rotated, with scanning put in place so fresh ones stop arriving.
₹13,999GST included
Security Assurance
Cloud Identity Review
Every identity in the cloud account measured against what it has actually used, with excessive roles trimmed back without breaking anything.
₹20,999GST included