Skip to content
New: VulnScanAI scans your website and explains every finding in plain English. Run a free scan
iSec ServicesInformation security since 2001

Information security, Mumbai, since 2001

Find the gaps before attackers and auditors do.

Attackers look for the weakest layer: an old server, a careless click, a vendor's forgotten login. iSec examines every layer of your organisation for Indian banks, insurers, energy companies and government bodies, and tells you what to fix first.

Book a consultation Run a free VulnScanAI scan
Illustration: an organisation mapped in five layersData at the centre, then applications, network and cloud, people, and third parties. A scan sweeps around the map and marks example findings by severity.DataApplicationsNetwork and cloudPeopleThird partiesCustomer database encrypted at restTLS 1.0 on payment gatewayPayment gateway still accepts TLS 1.0Internet banking app retested cleanNo HSTS on portalCustomer portal missing HSTS headerDefault device passwordDefault password on a network deviceFirewall rules reviewedCloud storage not public1 in 9 clicked a phishPhishing test: 1 in 9 staff clickedNew joiners background-verifiedAdmin accounts use two-factor sign-inVendor VPN never expiresVendor VPN account never expiresPayroll vendor ISO 27001 certifiedCourier partner checked
Critical High Medium Checked and clear Illustration: an example assessment, mapped layer by layer.
Established
2001
Organisations served
500+
Certified to
ISO 27001, ISO 9001
Team credentials
CISSP, CEH, OSCP

Services

Every engagement is scoped to your risk profile and the regulator you answer to, and ends with a report your board and your IT team can both act on.

Discuss a scope

New From iSec Services

VulnScanAI tells you what to fix next.

Our consultants' audit experience, packaged as a self-service tool. Point it at a website, IP or application you're authorised to test. It runs the scans, explains each finding in plain English and ranks what to fix. The Basic plan is free.

Start a free scan How VulnScanAI works

An iSec company: the outer layers

Verify the people you trust with access.

iChek is iSec's background verification and due diligence division. It screens new hires, household staff, partners and investments, and gives developers APIs for address and KYC checks.

About iChek See checks and prices
Employee screening
Education, employment, address, criminal, court, ID and reference checks. Packages from ₹1,499 plus GST.
Corporate due diligence
Checks on businesses, partners, leadership and investments before you sign.
Address API
Clean, scored Indian addresses at checkout. Free for 1,000 checks a month.
KYC API
ID document check, selfie match and video KYC, in limited release.

Sectors we protect

See clients by sector

  • Banking

    Core banking, payments and RBI audits

  • Insurance

    Policy and customer data protection

  • Power and energy

    Critical infrastructure and OT networks

  • Government

    Public systems and national security compliance

  • Finance and broking

    Trading platforms and SEBI cybersecurity

How an engagement runs

  1. Step 1

    Scope

    We agree the systems, the standard you're measured against and the deadline.

  2. Step 2

    Plan

    A test plan and schedule built around your change windows.

  3. Step 3

    Test and report

    Findings with evidence, severity and the exact remediation step.

  4. Step 4

    Verify and support

    We retest fixes and stay on call through your audit cycle.

What clients say

“iSec's comprehensive security audit helped us identify critical vulnerabilities we weren't aware of. Their expertise and professional approach were outstanding.”
Senior IT Manager, leading bank
“The penetration testing service provided detailed insights into our security posture. Highly recommended for any organization serious about security.”
CTO, Fortune 500 company
“iSec's compliance audit helped us achieve ISO 27001 certification. Their guidance throughout the process was invaluable and professional.”
Head of Security, energy sector

Since 2001

25 years

  1. 2001

    Founded in Mumbai as an information security consultancy

  2. Certified

    ISO 9001:2015 quality and ISO/IEC 27001 information security

  3. 500+

    Banks, insurers, energy companies, government bodies and brokers served

  4. iChek

    Background verification and due diligence division

  5. Today

    VulnScanAI brings our audit experience to a self-service scanner

A security partner, not a one-off audit

For over two decades iSec has combined deep technical testing with an understanding of how Indian regulators and boards read a security report.

Tell us what you need to prove, and to whom. We'll come back with a scope and a plan.

Book a consultation About iSec

Common questions

What does iSec Services do?

iSec Services is an information security consultancy in Mumbai. Since 2001 it has provided security audits, vulnerability assessments, penetration testing, compliance audits, business continuity planning and security training, and builds security software including VulnScanAI.

Which industries does iSec work with?

Banking, insurance, power and energy, government, and finance and broking organisations across India.

Is iSec Services certified?

Yes. iSec Services is certified to ISO 9001:2015 and ISO/IEC 27001, and its consultants hold certifications including CISSP, CEH and OSCP.

Does iSec do background verification?

Yes, through iChek, our background verification and due diligence division at ichek.info. It verifies employees, household staff, business partners and investments, and offers address and KYC APIs.

What is VulnScanAI?

VulnScanAI is iSec's AI-assisted vulnerability scanner. It scans websites, networks and applications you are authorised to test, explains findings in plain English and offers DPDP, RBI and SEBI readiness assessments. A free Basic plan is available.