Who we serve

Different rulebooks. The same need for security that holds.

DORA in Frankfurt. NYDFS 500 in New York. HITRUST in Boston. NERC CIP in Calgary. CERT-In in Mumbai. We build to the specific regulator, framework, and threat model of the industry — not a generic template.

Industries: 4 verticals
Frameworks: 19+ tracked
Regulators: FED · EU · UK · IN
Markets: NA · EU · GCC · IN

01 · Banks · Insurance · Fintech · Capital Markets

Financial Services

Regulator-grade security for the firms that move other people's money.

View industry detail

Frameworks & regulators

SOC 2 Type IIPCI DSS 4.0.1DORA (EU)GLBA / FFIEC (US)NYDFS Cybersecurity Reg 500FCA / PRA guidance (UK)RBI Cyber Security FrameworkIRDAI Information & Cyber Security GuidelinesSWIFT Customer Security Programme

Common engagements

Pre-onboarding security reviews for partner-bank arrangements
ATM, switch, and core-banking penetration testing
Mobile-banking and payment-rail app pen tests

02 · Federal · State · Defense · Smart Cities

Government & Public Sector

FedRAMP-aware, CMMC-aligned testing and audits for public-sector workloads.

View industry detail

Frameworks & regulators

FedRAMP (Moderate / High)CMMC 2.0 Levels 1–3FISMA / NIST SP 800-53 Rev 5StateRAMPISO/IEC 27001:2022CERT-In directivesMeitY guidelinesNCIIPC guidelines for protected systems

Common engagements

FedRAMP and StateRAMP authorization support
CMMC 2.0 Level 2 readiness for defense suppliers
Application security audits aligned to CERT-In standards

03 · Hospitals · Diagnostics · Pharma · MedTech

Healthcare & Life Sciences

Patient privacy and clinical continuity, not compliance theatre.

View industry detail

Frameworks & regulators

HIPAA / HITECHHITRUST CSFISO/IEC 27799FDA pre-market cybersecurity for medical devicesGDPR for clinical-trial dataGxP / ICH E6 (R3)ABDM (India)

Common engagements

PHI flow mapping and DLP rollout
Medical-device penetration testing and threat modelling (FDA-aligned)
Telehealth platform security and code review

04 · Utilities · Oil & Gas · Manufacturing · Transport

Critical Infrastructure & OT

OT-aware security for environments where downtime is dangerous.

View industry detail

Frameworks & regulators

IEC 62443 / ISA-99NERC CIPNIS2 Directive (EU)TSA Pipeline Security Directives (US)API 1164 (oil & gas pipelines)NCIIPC guidelines for protected systems

Common engagements

OT/IT segmentation reviews and zone/conduit modelling
ICS and SCADA assessments using passive-first techniques
NERC CIP audit preparation for North American utilities