Rakshak Cyber is a cybersecurity services firm keen to solve cybersecurity challenges and simplify the security for organizations.
A full-spectrum practice: governance and certification, offensive security, cloud and identity, security operations, OT and AI. Run as one method rather than a menu of one-off engagements.
Risk and gap assessment against the standard you are being held to, technical testing of the estate, and a read of how the organisation really operates, not how the policy says it does.
A findings register with severity, effort and owner against every gap.
Every gap is mapped to the clause, control or statutory duty it breaches (ISO 27001, ISO 27701, DPDP, CERT-In directions), then ranked by exposure rather than by how easy it is to close.
A prioritised remediation plan your board and your auditor can both read.
Controls and policies implemented alongside your teams, evidence collected as the work happens, and training where the gap is people rather than technology.
Controls in place, evidence filed, and staff who recognise the thing when it arrives.
We retest what was fixed, verify closure against the original finding, carry the certification audit with you, then hold the standard with a governance cadence instead of walking away at sign-off.
Certification supported, and a posture that survives the next audit as well as this one.
Ten disciplines under one engagement model. Compliance is where most clients start; it is not where the work stops.
ISO 27001 and 27701, DPDP readiness, CERT-In directions: gap to certificate.
VAPT across network, application and cloud, red teaming and configuration review.
Hardening, benchmark review and secure architecture across cloud and on-premise estates.
Access architecture, privilege review and segmentation designed to be operable, not theoretical.
Detection engineering, monitoring design and managed detection and response.
AI model development for security use cases, and assessment of AI systems already in production.
Plant-floor assessment and segmentation for manufacturing and operational technology.
Vendor due diligence and supply-chain assurance, run as a repeatable process.
Cybersecurity awareness training, ISO trainings and phishing simulation campaigns.
New DC and DR build-out, networking projects and hardware procurement support.
Six families of work, engaged singly or in sequence. Every offering runs the same method: Assess → Identify → Remediate → Revalidate.
We are a new firm without a decade of logos to show you. What we will commit to is the way the engagement runs.
One consultant owns your engagement from scoping through revalidation. You are not handed to a queue between phases, and the person in the closing call is the person who did the assessment.
Weekly, monthly or quarterly governance calls, chosen by the nature of the work rather than by convenience, and held whether or not there is good news that week.
Scope, effort and dates are agreed before work starts, and we do not agree to a certification date the evidence cannot support. Slower to promise, which is why the dates hold.
Certification is a checkpoint. Controls drift, estates change and the standard gets revised, so the relationship is built to run past the audit rather than end at it.
Request received.
A consultant will reply within one working day to agree a time. Nothing is scoped or priced until that call.