Selected engagements across regulated and high-growth sectors. Names withheld under NDA — references on request.
FinTech company with 250 employees grew over four years to 1,600. We scaled the security program alongside the business — designing controls and processes that travel from startup-scale through enterprise-scale.
Today the organisation passes 8–10 audits per year including ITGC, PCI-DSS, ISO 27001:2022, and RBI inspections — with no surprise findings.
Security landscape spanning 18+ retail malls and 16 residential / commercial real estate properties. We introduced a project-management mindset and helped the operator fine-tune their pan-India cybersecurity operations to meet ISO 27001:2022 compliance.
Coordinated across four teams in two geographies (France and India) to deliver holistic readiness for the CERT-In April 2022 guidelines. Engaged external agencies for audit support and rapid evidence collection.
A company that built a robot vending machine to dispense fresh salads. We brought the security profile up to industry standards — which became a key part of due diligence in their acquisition by a US-based retail giant.
The company deploys and monitors smart electricity meters across many Indian states. Heavy PII data exposure meant external attack risk was real. We locked down environments and introduced dark-web monitoring as an early-warning capability.
An INR 30,000 Cr revenue distributor. We prepared the business for ISO 27001:2022 — deploying and configuring 24 security platforms across internal and external applications hosted in their data center. Finally, empowered the internal IT team to run the operation.
Four legal units with separate security postures rolled into a single group view. Centralised security budget planning and program management with a unified dashboard for group CxOs.
Security management at both individual entity and group level. A program that creates a unified view for group CxOs and assists with centralised security budget planning and program management across the conglomerate.
A real risk picture in the first 30 days — not month three.
Dashboards CxOs actually read because the metrics map to outcomes.
Programs that hand over cleanly — internal teams own the steady state.
Controls work — so the audits pass naturally, year after year.
Tell us where you are, and we'll sketch a path to where you want to be — sized to your business and budget.