Case Studies
Challenge, work, outcome.
A selection of anonymised engagements showing exactly how we find risk, fix it with your team, and prove the result.
Selected work
Engagements that changed the risk picture.
Client names are withheld; findings, timelines, and outcomes are drawn from real engagements.
VAPT
Closing critical payment-flow flaws for a Pune fintech
A grey-box web and API penetration test uncovered authorisation flaws in the disbursement flow before a major partnership launch.
- Issues reported
- 23
- Critical / high
- 4
- To full remediation
- 12 days
Issues reported
Critical / high
To full remediation
Incident Response
Containing a ransomware outbreak at a manufacturing unit
Emergency response to a ransomware incident that had begun encrypting shared drives, with production restored inside 48 hours.
- To production restore
- 48 hrs
- Ransom paid
- 0
- Critical data recovered
- 100%
To production restore
Ransom paid
Critical data recovered
GRC & Compliance
ISO 27001 readiness for a growing SaaS company
Gap assessment to certification-ready in one quarter, unblocking enterprise deals stalled in security review.
- Major non-conformities
- 0
- Gap to audit-ready
- 1 quarter
- Controls documented
- 93
Major non-conformities
Gap to audit-ready
Controls documented
Security Awareness
Campus-wide phishing resilience program
Simulated phishing plus targeted training cut credential-submission rates by more than three quarters across staff and students.
- Credential submission
- 31% → 7%
- People trained
- 4,200+
- Campuses covered
- 3
Credential submission
People trained
Campuses covered
Cyber Crime Assistance
Account recovery and FIR support after a social-media takeover
A hijacked social account used for extortion was recovered and the evidence package handed to the cyber-crime cell.
- To full recovery
- 9 days
- FIR filed with evidence
- 1
- Money paid to attacker
- 0
To full recovery
FIR filed with evidence
Money paid to attacker
Facing a similar problem?
Share your environment and timelines. We will tell you honestly what is worth testing first.