Security Assurance
Application Penetration Assessment
A manual penetration test of the web application, each finding backed by proof-of-concept evidence, with a retest once your fixes land.
₹32,999GST included
Security Assurance
CR-ASR-104
Cloud Identity Review
Every identity in the cloud account measured against what it has actually used, with excessive roles trimmed back without breaking anything.
Timeline10 working days
Deliverables7 itemised
PracticeSecurity Assurance
Price₹20,999 incl. GST
01
The problem this solves
Permissions pile up: production access granted for an afternoon and never withdrawn, an automation role handed administrator rights because writing the correct policy looked like work. Drawing on access analysis and audit trail data, we set what each identity was granted against what it has used across 90 days, then write least-privilege replacements for the broad policies. Nothing is narrowed blindly: we propose each change, walk through it with you and apply it only where it is safe.
02
What you receive
- An inventory of every user, role, service identity and access key
- Granted permissions set against 90 days of actual use
- Least-privilege policies drafted and ready for you to apply
- Dormant identities and unused credentials listed, alongside a plan to remove them
- A review of multi-factor authentication and of the root account settings
- Trust between accounts and external access examined
- A quarterly access review process written down for your team
03
What changes afterwards
A stolen key opens far less than it would open today
Dormant credentials and departed colleagues are found and cleared
A quarterly review your own team can repeat without us
04
Is it the right fit?
Ideal for
- Cloud accounts whose permissions have accumulated for years unchecked
- Organisations where a departed colleague may still be able to sign in
- Teams heading into an audit that will ask about least privilege
What we need from you
- Read-only audit access to whichever cloud accounts are in scope
- Confirmation of the current owner of each service identity
- A change window in which to apply the agreed policies
05
Before you buy
Yes. It is in Indian rupees with 18% GST included, and it is exactly what you pay at checkout. Nothing is added afterwards for the scope listed on this page.
The working days are counted from the day we hold your payment, the completed brief and everything listed under “What we need from you”. If an input arrives late, the handover date moves by the same number of days.
Ask before you buy. We will confirm in writing whether it sits inside this scope, point you to a better-fitting service, or tell you it needs separate work.
On full payment, the code, configuration, designs and documents produced for this service belong to your organisation, as set out in our Terms.
Each unit repeats the listed scope once. It does not stretch a single unit to cover more.
Often considered alongside
Security Assurance
Credential Hygiene Sprint
Credentials sitting in your repositories located and rotated, with scanning put in place so fresh ones stop arriving.
₹13,999GST included
Security Assurance
Data Protection Readiness Review
A practical gap assessment against India's data protection law (DPDP Act, 2023), examining how consent is taken, how long data is kept, what your notices say and what follows a breach.
₹24,999GST included