Services · Professional Services
Know what attackers can see
Identify vulnerabilities and security weaknesses in your applications, networks and infrastructure—and receive prioritised, verified remediation guidance.
- Est. 2012
- 100+ organisations served
- Bengaluru-based support
What's included
- Scoping & rules of engagement
- Vulnerability assessment
- Penetration testing where contracted
Professional Services
Testing that finds real risk—not noise
Peritas has tested applications and networks for vulnerabilities across many customers. We blend tool-based testing with manual evaluation, so the findings you receive are verified and free of false positives.
Testing follows OWASP guidelines for applications and agreed rules of engagement for networks, and can be aligned to compliance requirements such as PCI-DSS, HIPAA, GDPR and ISO 27001. Where required, engagements can be delivered with CERT-In empanelled partners.
What's included
- Scoping & rules of engagement
- Vulnerability assessment
- Penetration testing where contracted
- Web, mobile & API testing
- Network & infrastructure testing
- Risk-rated reporting
- Remediation guidance
- Retest where included
Capabilities
What we deliver
Web application VAPT
OWASP-based testing of websites, portals and web applications.
Mobile & API testing
Security testing of mobile apps and the APIs behind them.
Network VAPT
External and internal testing of servers, firewalls and network devices.
Cloud configuration review
Review of cloud accounts and SaaS configurations.
Compliance testing
Testing aligned to PCI-DSS, HIPAA, GDPR, ISO 27001 and DPDP.
Retesting
Verify that fixes have closed the vulnerabilities found.
Process
Our VAPT process
-
01
Scope
Define targets, test types, timing and rules of engagement.
-
02
Test
Automated scanning plus manual testing by experienced testers.
-
03
Verify
Every finding manually validated to eliminate false positives.
-
04
Report
Executive summary and technical report with risk ratings.
-
05
Retest
Confirm remediation and issue a closure report.
FAQs
Frequently asked questions
Plain-English answers. Can't find what you need? Our specialists are a call away.
How long does a VAPT take?
Typically one to three weeks depending on the number of applications, IP addresses and test types in scope.
What is the difference between VA and PT?
Vulnerability assessment (VA) identifies and rates weaknesses. Penetration testing (PT) attempts to exploit them to show real-world impact.
Do you provide a certificate?
We provide a report and, after retesting, a closure report. If you need a CERT-In empanelled auditor's report for regulatory purposes, tell us at scoping.
Explore more
Related services
Let's talk
Request a scoped VAPT proposal
Tell us what you need tested and we will respond with scope, approach and timelines.