Secure · Cybersecurity
VAPT in Bengaluru and across India, with the fixes.
Vulnerability assessment and penetration testing (VAPT) for Indian organisations. NetScale scopes the test, runs it, reports each finding, fixes what it finds and retests. NetScale is not a CERT-In empanelled auditor; where a regulator requires an empanelled audit we work alongside the auditor and fix what they find.
- Last updated
What it is
VAPT
Vulnerability assessment and penetration testing (VAPT) finds the weaknesses in your systems and shows what an attacker could reach through them.
A vulnerability assessment lists known weaknesses, mostly by scanning. A penetration test tries to use them, the way an attacker would. NetScale reports each finding in writing, fixes it where the fixing is in scope, and retests every fix.
Sound familiar?
- 01
The last penetration test found issues. Who checked they were fixed?
Our answer: VAPT and penetration testing
- 02
A new app went live this year. Who tested it before customers did?
Our answer: Penetration testing
- 03
The auditor wants a VAPT report. Which systems were left out of the last one?
Our answer: Vulnerability scanning
- 04
Your regulator asks for a CERT-In empanelled audit. Who fixes what it finds?
Our answer: Fixes and retest
What we do.
- 01
VAPT and penetration testing
Vulnerability scanning and penetration testing of public-facing systems, VPN, websites, APIs and internal infrastructure, with every fix retested.
- 02
Vulnerability scanning
Public-facing systems, VPN, websites and APIs scanned, with each finding given a severity rating in a written report.
- 03
Penetration testing
Critical devices and private infrastructure tested the way an attacker would, with proof of concept for each finding in the report.
- 04
Fixes and retest
Findings fixed in fixed-scope phases where the fixing is in scope, then retested, so every fix is on record.
How an engagement runs.
One path from the internet to your data, drawn three times.
You can stop at any phase boundary. The assessment is free, and each phase is priced in writing before it starts.How we engage
India specifics and cost.
India specifics
- CERT-In empanelment
Not held, and stated plainly. Where an empanelled audit is required, the auditor runs it and we fix what it finds.
What drives the cost
- 01
Applications, hosts and IP ranges in scope.
- 02
Test depth: automated scanning only, or manual penetration testing as well.
- 03
Remediation scope: whether we fix the findings or your team does.
- 04
Retest frequency, agreed in writing.
The technology we run for this.
Vulnerability scanning
Our own information security and privacy management systems, run under both standards.
Certifications and technologyQuestions buyers ask about this.
Related services
Is NetScale CERT-In empanelled?
No. NetScale is not a CERT-In empanelled auditor, and we say so before any test is scoped. Where a regulator requires an empanelled audit, we work alongside the auditor and fix what they find, then retest so the fixes are on record.
What is the difference between a vulnerability assessment and a penetration test?
A vulnerability assessment lists known weaknesses across your systems, mostly by scanning. A penetration test tries to use them, the way an attacker would, to show what could actually be reached. We run both, report each finding in writing, fix what we find and retest.
How often should we run a VAPT?
On a schedule agreed in writing, and after every major change to an application or the network. Each fix is retested in the same engagement, so the report shows what was found and what was closed.
Book a VAPT scoping call.
It costs nothing and commits you to nothing. You get a written list of where your IT environment is exposed, and your team can act on it with or without us.
What we put in writing
- The written findings are yours whether we ever work together or not.
- Each phase is fixed-scope and signed off separately.
- You can stop at any phase boundary.
- Runbooks, configurations and credentials are yours.