Security Assurance
Application Penetration Assessment
A manual penetration test of the web application, each finding backed by proof-of-concept evidence, with a retest once your fixes land.
₹32,999GST included
Security Assurance
CR-ASR-105
Credential Hygiene Sprint
Credentials sitting in your repositories located and rotated, with scanning put in place so fresh ones stop arriving.
Timeline6 working days
Deliverables7 itemised
PracticeSecurity Assurance
Price₹13,999 incl. GST
01
The problem this solves
A codebase that has never been scanned usually holds a working credential somewhere in its past, and deleting the file leaves the old commit untouched. We read the whole history across your repositories, establish which secrets still work and sequence the rotation safely. Dependency hygiene gets the same treatment: outdated packages with known weaknesses are identified, and scanning is added so the next problem is caught at the pull request.
02
What you receive
- Complete version control history scanned across as many as 20 repositories
- Working credentials confirmed and ordered for rotation by priority
- Secrets relocated into a managed secret store
- Dependency weaknesses reported, with an upgrade order you can actually follow
- Hooks before commit and scanning in the pipeline, to stop the next one landing
- An automated dependency update bot set up with sensible grouping
- A brief written guide to handling secrets, for your team
03
What changes afterwards
Working credentials removed from repositories that never should have carried them
Weak dependencies named, with a sequence for upgrading them
The next accidental secret is stopped before it leaves the laptop
04
Is it the right fit?
Ideal for
- Teams whose repository history has never been examined
- Organisations about to open a private repository to contractors
- Anyone who has deferred dependency updates for a year or longer
What we need from you
- Read access across the repositories in scope, archives included
- A colleague who can rotate credentials inside each connected service
- A brief window for rotating anything that production leans on
05
Before you buy
Yes. It is in Indian rupees with 18% GST included, and it is exactly what you pay at checkout. Nothing is added afterwards for the scope listed on this page.
The working days are counted from the day we hold your payment, the completed brief and everything listed under “What we need from you”. If an input arrives late, the handover date moves by the same number of days.
Ask before you buy. We will confirm in writing whether it sits inside this scope, point you to a better-fitting service, or tell you it needs separate work.
On full payment, the code, configuration, designs and documents produced for this service belong to your organisation, as set out in our Terms.
Each unit repeats the listed scope once. It does not stretch a single unit to cover more.
Often considered alongside
Security Assurance
Cloud Identity Review
Every identity in the cloud account measured against what it has actually used, with excessive roles trimmed back without breaking anything.
₹20,999GST included
Security Assurance
Data Protection Readiness Review
A practical gap assessment against India's data protection law (DPDP Act, 2023), examining how consent is taken, how long data is kept, what your notices say and what follows a breach.
₹24,999GST included