Services · Security

A free security audit for your website or app

One public website or app, looked at by a person. No charge, no obligation, and written permission first.

Ask for the free audit Talk on WhatsApp

The Nivasik Team offers three things free, one per company: a security audit of one public website or app, a short hunt for critical vulnerabilities, and a one-page plan for securing your infrastructure.

Each needs written permission and none is a VAPT report. You owe us nothing afterwards.

The three free offers

  • A free security audit

    A person looks at one public website or app from the outside, as a stranger would: exposed admin pages, outdated software, leaked files, weak settings, mail spoofing.

    You get a short written list of what matters most and how to fix it.

  • A free critical-vulnerability hunt

    A short, agreed time box on one public web app, looking only for the serious things: the bugs that give away data or control. Careful, non-destructive testing, and only with your written permission.

    Anything Critical or High is told to you the same day.

  • A free secure-infrastructure plan

    A call about how your servers, cloud, logins and backups are set up, then a one-page plan: what to fix first, what can wait, and what you do not need to buy.

    Yours to keep, whoever does the work.

The fair limits

  • One per company, one website or app.
  • Written permission first, from someone allowed to give it. Testing a system without the owner's permission can be an offence under the IT Act, 2000 (sections 43 and 66), so we will not start without it.
  • We may say no: if we are full, or the system is not yours, or it is too risky to touch.
  • It is not a VAPT report. It will not satisfy a customer or a regulator who asks for one. If you want a report, we quote for it, and you owe us nothing for the free look.
  • No obligation. We tell you what we found whether or not you buy anything.

How it goes

  1. Send the request below.
  2. We reply within a day, and ask a few questions.
  3. You sign one page of permission and scope.
  4. We look. Anything Critical or High is told to you the same day.
  5. You get a short written list, and a call if you want one.
  6. Fix it yourself, with your own team, or ask us.

What this is not

Said plainly

  • The Nivasik Team is not a CERT-In empanelled auditor and holds no security certification. If a regulator or customer asks for a report from an empanelled auditor, or for a certificate, that comes from them, not from us.
  • No test proves a system is safe. It shows what was found, in the time and scope agreed.
  • Nothing is guaranteed: not a pass, not a certificate, not a result.

Questions people ask

Is the security audit really free?

Yes, one per company, for one public website or app. We do it because some of you will then ask us for a full test. You do not have to.

What is the catch?

It is short and from the outside, so it finds less than a paid test. It is also not a report you can show an auditor.

Can you hunt for critical vulnerabilities for free?

On one public web app, in a short time box we agree first, and with written permission. We stop at proving a problem exists; we do not take data or break anything.

Will it break my website?

We use careful, non-destructive checks and agree the timing. Any testing carries some risk, so tell us about anything fragile first, and have a backup.

How do I check my website security right now?

Use the free website check: it takes seconds and reads only what is public.

Do you offer this outside India?

The team works remotely, so yes, in English, subject to the same permission.

Ask for it

We reply within a day. Your details go to the Nivasik Team and nowhere else.