Cybersecurity and VAPT Company in Kanpur

Yes. SecureRoot Risk Advisory LLP has its registered office in Kanpur Nagar, Uttar Pradesh, and it is a working office rather than a registration address. The full address, the telephone number and the enquiry mailbox on this page are read from the same record as the contact page and the footer, so they cannot disagree. The firm also has a branch office in Greater Noida West, which serves Delhi NCR. Both belong to one team: the consultants and engineers who scope an engagement for a client in Kanpur are the people who deliver it, whichever office they are working from that week. Workshops, kick-offs and readouts for clients in the city can be held at our office or on your premises, whichever suits the people who need to attend, and the rest of the work is delivered remotely during your working day.

Yes, from Kanpur and remotely. We do not have an office in Lucknow or anywhere else in the state apart from Kanpur Nagar and the Greater Noida West branch, and we would rather say so than list an address we do not have. For most engagements that makes no practical difference: external penetration testing, evidence reviews, policy work and vCISO time are delivered remotely in any case. Where the scope needs a person in the room, such as an internal network test, a gap workshop with control owners or an audit day, the on-site days are agreed on the scoping call and written into the scope and the price before work starts. Clients in western Uttar Pradesh closer to Delhi NCR may be better served by the Greater Noida West branch, and the scoping call is where that gets decided.

All 34 services in the catalogue, delivered the same way as anywhere else. That covers compliance programmes across 13 frameworks, including ISO 27001, SOC 2, PCI DSS and the DPDP Act; manual penetration testing across seven surfaces, from web and mobile applications and APIs to networks, IoT devices and cloud accounts; secure code review and software composition analysis; hardening reviews of cloud, operating systems, firewalls, Active Directory and databases; and managed services such as SOC as a service, vCISO, vDPO, red team assessments, phishing simulations and awareness training. The service blocks above link the ones clients most often start with, and every service has its own page setting out the methodology and the deliverables. If you are not sure which one your situation calls for, describe the problem on the scoping call and we will tell you.

Start with the request itself. Send us the email, the questionnaire clause or the audit requirement that asked for the report, along with the deadline, and book the scoping call. On the call we work out what the request really needs: which applications, APIs or networks are in scope, whether a retest report is expected, and whether the report has to map to a framework such as ISO 27001, SOC 2 or PCI DSS. You then receive a written scope with a timeline and a fixed price. The finished report separates the executive summary your customer or auditor reads from the technical detail your developers work from, and the verified retest report that follows the fixes is usually the document the requester wanted in the first place. If the request can be met with a narrower test than you expected, we say so.

Every engagement is priced against a written scope, not a day rate, so no figure is published on this page. The scoping call establishes the systems, the frameworks, the people involved and the deadline, and the proposal gives a fixed price for exactly that. Any on-site days, whether at your premises in Kanpur, in Lucknow or elsewhere in the state, are identified on that call and included in the scope and the price, so they do not surface later as an unexpected line. If the scope changes once work has begun, the price is revised in writing before the additional work starts, never afterwards. The scoping call and the written proposal cost nothing and carry no obligation. Our guide to penetration testing cost in India, linked below, explains which factors move the number for a testing engagement.