Cyber Defence
Manual Web Security Test
Hands-on security testing of your web application with proof-of-concept evidence for every finding and a free retest after you fix issues.
Fixed price · GST incl.₹32,999
Cyber Defence
DPDP Act 2023 Gap Assessment
A hands-on review of your readiness for the DPDP Act 2023, covering consent collection, data retention, privacy notices and your breach response process.
15 working days₹24,999 incl. GST7 deliverables
What this service covers
The DPDP Act 2023 changes how Indian businesses must handle personal data, yet few product teams know where all of theirs lives. We trace it through your database, analytics tools, support inbox, marketing platform and any spreadsheets sitting on staff laptops, then test consent, retention and processor agreements against the Act. Every gap receives a severity rating. You get revised consent wording, a retention schedule, a way to handle requests to see, fix or delete data, and a breach notification procedure with a costed fix plan. This is an engineering-led review rather than legal advice; we highlight where your lawyers should weigh in.
What you receive
- A map of personal data held across systems, suppliers and storage
- Diagrams showing how data is collected, used, shared and deleted
- Each obligation under the Act checked, with gaps rated by severity
- Consent screens and notices reviewed, with improved wording provided
- A suggested retention period for every data category
- A workflow for handling access, correction and deletion requests
- A breach notification process and a fix plan with effort estimates
The work in 4 stages
-
Stage 1: Locate
System owners are interviewed and personal data found, including hidden copies.
-
Stage 2: Trace
Data movement is documented from first capture to final deletion.
-
Stage 3: Compare
Current practice is checked against each clause of the Act.
-
Stage 4: Prioritise
Gaps are ranked, each with an owner, an effort figure and a suggested order.
Who it suits, and what we need from you
Ideal for
- Indian businesses storing any amount of customer personal data
- Products expanding the data they collect from Indian users
- Businesses using a privacy policy borrowed from another website years ago
What we need from you
- Brief interviews with each system owner
- Your current privacy policy, supplier list and consent screens
- A leader prepared to own the follow-up work
You share these through the brief on your order page after checkout.
What changes for your team
- A true picture of where your personal data is stored
- Consent and retention practices you can defend with confidence
- A prioritised plan instead of a general feeling of risk
Questions about this service
No. We review technology and processes only, and we work with your lawyers, flagging anything that needs their view.
The data map and flow diagrams support both. A full assessment under the European rules adds scope and will be quoted separately.
Yes. Duties grow with the volume and sensitivity of data, but they begin with your very first user.
This is a remote service: nothing is shipped physically, and the work is delivered into systems you control. See delivery and handover and refunds and cancellation for the full terms.