Services · Security

Penetration testing services in India

A person trying to break in, with your permission, before someone else does.

Ask about a test Talk on WhatsApp

Penetration testing is a person, with your permission, trying to break in the way an attacker would. It finds what scanners miss, especially logic bugs like one customer reading another's data.

The Nivasik Team tests web apps, APIs, mobile apps, networks and cloud, and gives you findings your developers can fix.

What it usually finds that scanners miss

  • One user reading or changing another user's records by editing an ID.
  • A normal login reaching an admin function.
  • Prices or quantities changed on the way to the server.
  • Password reset flows that can be walked through.
  • Secrets left in a mobile app or a public file.

How a test runs

  1. Agree scope and sign permission.
  2. Map what is exposed.
  3. Test by hand, on top of tools.
  4. Tell you the same day about anything Critical.
  5. Report, with proof and a fix for each finding.
  6. Retest after you fix it.

What this is not

Said plainly

  • The Nivasik Team is not a CERT-In empanelled auditor and holds no security certification. If a regulator or customer asks for a report from an empanelled auditor, or for a certificate, that comes from them, not from us.
  • No test proves a system is safe. It shows what was found, in the time and scope agreed.
  • Nothing is guaranteed: not a pass, not a certificate, not a result.

Questions people ask

What is penetration testing?

A person, with your permission, tries to break in the way an attacker would, to show what could really happen.

Penetration testing or a vulnerability scan?

A scan lists known problems, automatically. A penetration test has a person find what a tool cannot, such as broken logic: one customer reading another's bill.

What are black box, grey box and white box?

How much the tester is given: nothing, a login, or the code. Grey box usually finds the most for the money.

Are there free penetration testing tools?

Yes: OWASP ZAP, Nmap and others are free, and you should use them. A tool does not understand your business, which is where the worst bugs are.

How much does penetration testing cost?

See published prices in India. We quote per engagement in writing.

Ask for it

We reply within a day. Your details go to the Nivasik Team and nowhere else.