Which cyber security firm should an Indian business hire?
As of 24 October 2026: the service descriptions, prices and turnaround figures on this page are current.
What do you do, and what do you actually get?
Six services cover the overwhelming majority of what people call us for. Each one has a defined scope, a stated price band, and a delivery date you can put in a plan. You are not buying hours; you are buying a finding, a fix, and proof that the fix held.
VAPT & Penetration Testing
Authorised vulnerability assessment and penetration testing for web, mobile, API and network.
₹45,000 – ₹3,50,000 depending on scope and number of assets
Hire an Ethical Hacker
Authorised ethical hacking for Indian businesses, handled as a scoped, signed engagement.
₹12,000 to ₹30,000 per tester-day, quoted after scoping
AI-Driven Ethical Hacking
AI-assisted testing for broad coverage, with certified human testers doing the exploitation and signing off.
₹12,000 to ₹30,000 per tester-day, quoted after scoping
Web Application Security
Web app testing that reads like a breach report, not a scanner dump.
₹45,000 – ₹2,50,000
Mobile App Security Testing
iOS and Android testing of the app binary, the API behind it, and the data it stores.
₹60,000 – ₹2,50,000
API Security Testing
Where most modern breaches actually happen, and where most scanners never look.
₹50,000 – ₹2,00,000
Network Penetration Testing
Internal network, external perimeter, firewall and segmentation testing.
₹75,000 – ₹3,00,000
Cloud Security Assessment
AWS, Azure and GCP configuration review, plus container and Kubernetes testing.
₹80,000 – ₹3,50,000
Incident Response & Retainer
24/7 help when something is already happening — and a retainer to stop it happening.
₹1,50,000 – ₹9,00,000 per year, or per-incident from ₹35,000
Ransomware Recovery & File Unlock
When files are encrypted, the priority is containment first and recovery second.
₹40,000 – ₹5,00,000 depending on estate size and encryption type
Website Malware Removal
Blacklisted, defaced, injecting spam, or sending phishing mail from your server.
₹15,000 – ₹75,000
Deepfake & AI Abuse Protection
Detection, takedown and monitoring for AI face swaps, voice clones and impersonation accounts.
₹25,000 – ₹4,00,000 for a monitoring retainer
Why is the work defensible?
A penetration test that only finds what an automated scanner finds is not a penetration test. It is a subscription. The parts of this job that matter are the judgement calls: which finding actually matters to your business, which one is a false positive, and what the attacker would do next. That is why every engagement is signed off by a named analyst and every finding carries a business-impact note, not just a CVSS number.
- AI-assisted coverage for speed, human judgement on what it finds.
- A signed rules-of-engagement document before any packet is sent.
- A technical report your engineers can act on, and a one-page summary for a board.
- A retest after remediation, with each finding marked closed, partial or still open.
- India-specific legal framing: IT Act 2000, CERT-In directions, and the DPDP Act 2023.
- A fixed price band and a delivery date, agreed before work starts.
Who do you work with?
The same technical skills apply everywhere, but the risk you are actually managing depends on what you do. These pages set out what matters in your situation rather than repeating the same service description with a different name on it.
For Individuals
personal digital safety
For Small Businesses
the smallest viable security
For Startups
security that scales with you
For Enterprises
risk, evidence and defensibility
For Banks & Financial Services
a regulated environment
For Hospitals & Healthcare
patient data and clinical safety
For Schools & Colleges
a mixed device estate and a young audience
For E-commerce & Marketplaces
transactions and customer data
What common problems are you called about?
These are the situations that arrive in our inbox most often, and what we check when they do. If your situation is on this list, the page below will tell you exactly what we look at and what you will get back.
Is My Phone Hacked?
How do I know if my phone has been hacked?
Has My Email Been Compromised?
How do I check if my email account has been hacked?
Has My Website Been Hacked?
How do I know if my website has been hacked?
Ransomware Attack Recovery
What should I do if I have been hit by ransomware?
How Do I Know a Video of Me Is a Deepfake?
How do I know a video of me is a deepfake?
Am I Being Phased?
How can I tell if I am being phished?
What do your main services cost?
These are the indicative bands, confirmed in writing as a fixed price before any work starts. They do not change at the state line.
| Service | Indicative band (ex-GST) | Typical turnaround |
|---|---|---|
| VAPT and penetration testing | Rs 45,000 - 6,00,000 | 5-10 working days |
| Web application security testing | Rs 1,20,000 - 3,50,000 | 7-12 working days |
| Mobile app security testing | Rs 1,00,000 - 3,00,000 | 7-10 working days |
| API security testing | Rs 1,00,000 - 4,00,000 | 8-15 working days |
| Network and segmentation testing | Rs 60,000 - 6,00,000 | 5-20 working days |
| Cloud security assessment | Rs 1,00,000 - 3,50,000 | 5-10 working days |
| Managed security operations (24/7) | Rs 2,50,000 - 12,00,000 per year | Continuous |
| Incident response retainer | Rs 2,50,000 - 6,00,000 per year | Under 4 hours to engage |
| Ransomware recovery | Rs 1,50,000 - 8,00,000 | Under 4 hours to engage |
| Digital forensics | Rs 75,000 - 4,00,000 | 2-10 working days |
| Deepfake and AI abuse takedown | Rs 40,000 - 2,00,000 | First notice within hours |
| DPDP and CERT-In readiness | Rs 1,00,000 - 5,00,000 | 15-45 working days |
| Awareness training and phishing simulation | Rs 25,000 - 1,50,000 | 2-10 working days |
| Cyber security audit and gap assessment | Rs 60,000 - 2,50,000 | 5-15 working days |
What is your coverage across India?
Most engagements are delivered remotely. On-site work is scheduled where the engagement needs physical access, a formal kickoff with your team, or a site survey.
- Cyber security services in Andhra Pradesh
- Cyber security services in Arunachal Pradesh
- Cyber security services in Assam
- Cyber security services in Bihar
- Cyber security services in Chhattisgarh
- Cyber security services in Goa
- Cyber security services in Gujarat
- Cyber security services in Haryana
- Cyber security services in Himachal Pradesh
- Cyber security services in Jharkhand
- Cyber security services in Karnataka
- Cyber security services in Kerala
- Cyber security services in Madhya Pradesh
- Cyber security services in Maharashtra
- Cyber security services in Manipur
- Cyber security services in Meghalaya
- Cyber security services in Mizoram
- Cyber security services in Nagaland
- Cyber security services in Odisha
- Cyber security services in Punjab
- Cyber security services in Rajasthan
- Cyber security services in Sikkim
- Cyber security services in Tamil Nadu
- Cyber security services in Telangana
- Cyber security services in Tripura
- Cyber security services in Uttar Pradesh
- Cyber security services in Uttarakhand
- Cyber security services in West Bengal
- Cyber security services in Delhi (NCT)
- Cyber security services in Jammu & Kashmir
- Cyber security services in Ladakh
- Cyber security services in Andaman & Nicobar Islands
- Cyber security services in Chandigarh
- Cyber security services in Dadra & Nagar Haveli and Daman & Diu
- Cyber security services in Lakshadweep
- Cyber security services in Puducherry
What does "ethical" mean in practice?
The word is used loosely in this industry, so it is worth being precise about our position. AAVETech works only on systems a client owns or has given us explicit written permission to test, and only inside the signed scope and time window. We do not sell access to accounts, devices or systems that a person does not own or control. We do not help monitor a partner's phone without their informed consent, and we do not assist with unauthorised access under any framing.
That is not a marketing position, it is a legal and practical one. Work done without authorisation is a criminal offence under the Information Technology Act, 2000, and it is also the fastest way for a client to end up in a legal problem rather than a security one. Read the authorisation and rules of engagement page for the detail.
What questions do you get asked?
Tell us what is going on
Send a short description of the problem and the systems involved. You will get a direct answer about whether we can help, what it will cost, and how quickly we can start — from an analyst, not a form responder.
Request a quote See pricingLast reviewed: 24 October 2026. Information on this page is general guidance, not legal advice. Prices are indicative bands for a typical scope and are confirmed in a written quote before any work begins.