# SecureRoot

> SecureRoot Risk Advisory LLP is a cybersecurity compliance and VAPT
> consultancy based in Kanpur and Greater Noida West, Uttar Pradesh, India.
> We run ISO 27001, SOC 2, PCI DSS, DPDP Act and GDPR compliance programmes,
> manual exploit-driven penetration testing, secure code review, software
> composition analysis, hardening and configuration review, and managed
> security services (vCISO, SOC-as-a-service, red team, phishing simulation)
> for clients across India, the US, UK, UAE and Australia.

Contact: sales@secureroot.co | +91-7307148874
Registered office: Plot No. 110-A, Gandhi Gram, Kanpur Nagar, Uttar Pradesh 208007, India
Branch office: Tower 3, Golden-I, Sector Tech Zone IV, Greater Noida West, Uttar Pradesh 201318, India

## Services
- [All services](https://secureroot.co/en/services/): Six practice areas, 34 services
- [Compliance](https://secureroot.co/en/services/compliance/): ISO 27001, ISO 27701, ISO 22301, ISO 42001, SOC 2, PCI DSS, HIPAA, GDPR, CCPA, NEN 7510, EU AI Act, TPRM and DPDP Act certification and readiness programmes
- [DPDP Act Readiness](https://secureroot.co/en/services/compliance/dpdpa/): Data mapping, gap assessment, consent and notice design, data-principal rights, breach response for India's DPDP Act
- [ISO 27001](https://secureroot.co/en/services/compliance/iso-27001/): ISMS implementation and certification readiness
- [SOC 2](https://secureroot.co/en/services/compliance/soc-2/): Type 1 and Type 2 readiness and audit support
- [PCI DSS](https://secureroot.co/en/services/compliance/pci-dss/): Scoping, gap assessment and remediation for cardholder environments
- [VAPT](https://secureroot.co/en/services/vapt/): Manual, exploit-driven testing across web, mobile, API, thick client, network, IoT and cloud
- [Web Application VAPT](https://secureroot.co/en/services/vapt/web-application/)
- [Mobile Application VAPT](https://secureroot.co/en/services/vapt/mobile-application/)
- [API VAPT](https://secureroot.co/en/services/vapt/api/)
- [Cloud VAPT](https://secureroot.co/en/services/vapt/cloud/)
- [Secure Code Review](https://secureroot.co/en/services/secure-code-review/): Line-by-line review of authentication, authorization, payment and data-handling paths
- [Software Composition Analysis](https://secureroot.co/en/services/software-composition-analysis/): Open-source and third-party inventory, vulnerability mapping, SBOM
- [Hardening and Configuration Review](https://secureroot.co/en/services/hardening-configuration-review/): CIS Benchmark and vendor-baseline audits for cloud, OS, firewall, Active Directory and the data tier
- [Managed Services](https://secureroot.co/en/services/managed-services/): Red teaming, SOC-as-a-service, vCISO, vDPO, phishing simulation, awareness training, digital forensics
- [Virtual CISO](https://secureroot.co/en/services/managed-services/vciso/)
- [Phishing Simulation](https://secureroot.co/en/services/managed-services/phishing-simulation/)

## Products
- [Products](https://secureroot.co/en/products/): TrustGrid, a continuous control-evidence platform, and DPDPA Compass, a DPDP Act readiness and monitoring tool

## Guides
- [SOC 2 Services in India](https://secureroot.co/en/soc-2-services-in-india/): The complete guide to the SOC 2 audit, readiness assessment and the Type 2 observation window, and how startups get there
- [DPDP Services in India](https://secureroot.co/en/dpdp-services-in-india-compliance-guide/): What a DPDP Act programme covers, the tools and steps behind it, who is in scope, costs and how to choose a partner
- [SOC 2 Certification Cost in India](https://secureroot.co/en/soc-2-certification-cost-in-india/)
- [ISO 27001 Certification Cost in India](https://secureroot.co/en/iso-27001-certification-cost-in-india/)
- [Penetration Testing Cost in India](https://secureroot.co/en/penetration-testing-cost-in-india/)
- [DPDP Act Consultant in Noida](https://secureroot.co/en/dpdp-act-consultant-noida/)
- [DPDP Act Compliance Checklist](https://secureroot.co/en/dpdp-act-compliance-checklist/)
- [ISO 27001 vs SOC 2](https://secureroot.co/en/iso-27001-vs-soc-2/)
- [Full article index](https://secureroot.co/en/blog/)

## Locations
- [Penetration Testing in Noida](https://secureroot.co/en/penetration-testing-noida/): Manual VAPT for Noida and Delhi NCR from the Greater Noida West office: web, mobile, API, network and cloud testing, fixed price, retest included
- [Cybersecurity Company in Delhi NCR](https://secureroot.co/en/cybersecurity-company-delhi-ncr/): ISO 27001, SOC 2, PCI DSS and DPDP Act programmes, manual VAPT and managed security for Delhi NCR, priced in writing

## Authors
- [Sachin Shirish](https://secureroot.co/en/authors/sachin-shirish/): Director at SecureRoot Risk Advisory LLP, CEH and ISO 27001 Lead Auditor; profile, credentials and articles
- [Pragya Dwivedi](https://secureroot.co/en/authors/pragya-dwivedi/): Associate Director at SecureRoot Risk Advisory LLP, CISM and eWPTX; profile, credentials and articles

## Company
- [About](https://secureroot.co/en/about/)
- [Industries](https://secureroot.co/en/industries/)
- [Case Studies](https://secureroot.co/en/case-studies/)
- [Resources](https://secureroot.co/en/resources/)
- [Contact](https://secureroot.co/en/contact/)
- [Request an Assessment](https://secureroot.co/en/request-assessment/)

## Optional
- [Privacy Notice](https://secureroot.co/en/privacy/)
- [Terms](https://secureroot.co/en/terms/)