Cyber Defence
Manual Web Security Test
Hands-on security testing of your web application with proof-of-concept evidence for every finding and a free retest after you fix issues.
Fixed price · GST incl.₹32,999
Cyber Defence
SOC 2 Pre-Audit Controls
Automated evidence gathering and the technical controls your SOC 2 Type II report depends on, set up and running before your observation period begins.
30 working days₹48,999 incl. GST7 deliverables
What this service covers
SOC 2 auditors want months of proof: access reviewed, changes approved, backups restored, logs retained. Gathering that retrospectively once the observation period has started is a struggle. We implement the technical controls up front: automated quarterly access reviews, change control enforced through pull request approvals, centralised logging with the retention your audit needs, and vulnerability handling with response times set by severity. Backup and recovery tests are carried out and recorded, evidence is collected automatically wherever possible, and a runbook maps each control to its evidence. The result is fewer findings and a more focused audit.
What you receive
- A gap review against the trust services criteria in scope
- Automated access reviews that generate evidence each quarter
- Change control enforced through pull request approvals, with a full record
- Centralised logs kept for the period the audit requires
- A vulnerability process with response times set by severity
- Backup, restore and recovery tests performed and documented
- A runbook linking each control to how its evidence is gathered
The work in 4 stages
-
Stage 1: Review
Your existing controls are checked against the chosen criteria.
-
Stage 2: Put in place
Technical controls are built into your current tools.
-
Stage 3: Automate evidence
Collection is scheduled so records build up on their own.
-
Stage 4: Dry run
We issue a practice evidence request just as an auditor would.
Who it suits, and what we need from you
Ideal for
- Businesses whose large deals stall at the security questionnaire
- Startups about to start their SOC 2 Type II observation period
- Teams with a compliance platform but no engineers to implement it
What we need from you
- Admin access to cloud, identity and code repository systems
- A named compliance owner in your team
- Your chosen auditor or compliance platform, if already decided
You share these through the brief on your order page after checkout.
What changes for your team
- Evidence accumulates automatically rather than being pieced together afterwards
- Controls are already running on day one of the observation period
- Fewer findings, so the audit stays focused
Questions about this service
No. A licensed CPA firm must perform the audit; we get you ready and support the auditor you choose.
Many technical controls overlap. ISO 27001 also requires an information security management system and its documentation, which is quoted as a separate scope.
Type II needs an observation period of three to twelve months once controls are running. This work shortens the preparation, not the observation period.
This is a remote service: nothing is shipped physically, and the work is delivered into systems you control. See delivery and handover and refunds and cancellation for the full terms.