Engagement models
Choose how you work with us — once, ongoing, or side by side.
Every audit area can be delivered through any of these models. Mix them as your needs change.
01 · Project-based
A defined scope, a fixed timeline and a final report.
Point-in-time
One-time Audit / Test
Best for: Go-lives, client or regulator requests, annual audits.
- Fixed scope and fixed fee
- Report with risk ratings and fix guidance
- One free retest and a closure certificate
Adversary simulation
Red Teaming
Best for: Mature teams testing detection and response.
- Goal-based attack scenarios
- Phishing, external and internal attack paths
- Debrief with your SOC / blue team
02 · Continuous assurance (subscription)
Regular testing so new releases and changes don't open new gaps.
4 cycles / year
Quarterly Assurance
Best for: Regulated firms and fast-growing SaaS.
- Scheduled VAPT every quarter
- Trend view of risk over time
- Evidence ready for audits
12 cycles / year
Monthly Assurance
Best for: Frequent releases and large attack surfaces.
- Monthly scans plus manual validation
- Release-based testing on request
- Monthly review call
03 · Partnership
We work inside your team, or stand independently beside it.
Staff augmentation
Embedded Testers
Best for: Teams that need testers without hiring.
- Certified testers working as part of your team
- Full-time, part-time or on-demand
- Follow your tools, sprints and processes
Third-party assurance
Independent External Auditor
Best for: Board, regulator, investor and customer assurance.
- Independent opinion and attestation
- ISO 27001, RBI, SEBI, IRDAI, DPDP aligned
- Reports you can share externally
Pentest-Tools subscription
Tool + Handholding
Best for: Teams who want to run their own testing.
- Pentest-Tools.com licence billed in INR
- Setup, training and finding validation
- Expert help when you need it
Not sure which model fits? Tell us your goal and we'll suggest one.
Find your broken locks before someone else does.
Tell us what you need tested. We reply within one business day.