AuditXYZ

CERT-In Empanelled Auditor

Fortune4 Expert Advisors

Mumbai, Maharashtra

CERT-In Empanelled

Overview

Fortune4 Expert Advisors is empanelled by CERT-In as an information security auditing organisation, auditing since 2019 and headquartered in Mumbai, Maharashtra. It is authorised to carry out security audits for government bodies, regulated entities (RBI, SEBI, IRDAI), and commercial organisations under the CERT-In empanelment programme.

Capability snapshot self-reported by the auditor on 2026-04-13.

Contact Details

Address
A 2404 - C, Marathon Futurex, NM Joshi Marg, Lower Parel East, Mumbai - 400013
Phone
+91 9833097663+91 7689925734
Contact person
Rohit Date/ Virendra Singh
[email protected]

Audit Capabilities

Capability snapshot self-reported to CERT-In. 31 capabilityies explicitly supported.

Supported

  • Compliance audits (ISO 27001, PCI, IEC 62443, SOC 2, etc.)
  • Finance sector audits (SWIFT, ATM, CBS, API, payment gateway)
  • API security testing
  • Mobile application security testing
  • Web application security audit
  • Wireless security audit
  • Telecom / 5G security audit
  • ICS / OT / SCADA audits
  • Device / IoT / embedded security audit
  • Hardening / configuration review
  • Network security audit
  • Identity and access management / PAM audit
  • Endpoint / DLP / email security audit
  • Cloud security audits
  • Data privacy / DPDP / GDPR audit
  • Source code review / SAST / SCA
  • Secure SDLC / DevSecOps review
  • Red team assessment
  • Breach and attack simulation / ransomware simulation
  • Social engineering / phishing simulation
  • Security architecture review
  • Cyber security / SOC audit
  • Managed security services / monitoring
  • Dark web / brand / attack surface monitoring
  • Threat hunting / compromise assessment
  • Digital forensics / incident response
  • Risk / maturity / gap assessment
  • Business continuity / DR audit
  • IS policies, procedures and ISMS consulting
  • Security awareness training
  • AI / ML security assessment

19 additional capability areas were not reported by the auditor on their last snapshot.

Service lines as listed

  • Network security audit(listed without Y/N)
  • Web-application security audit(listed without Y/N)
  • Wireless security audit(listed without Y/N)
  • Compliance audits (ISO 27001, IEC 62443, IEC 27019, PCI, etc.)(listed without Y/N)
  • Finance Sector Audits (SWIFT, ATMs, API, Payment Gateway etc.)(listed without Y/N)
  • ICS/OT Audits(listed without Y/N)
  • Cloud security Audits(listed without Y/N)
  • Endpoint Security Assessment (EDR/XDR Validation)(listed without Y/N)
  • Mobile Application Security Testing (Android/iOS)(listed without Y/N)
  • API Security Testing (REST, GraphQL, SOAP)(listed without Y/N)
  • Red Team Assessment (Adversary Simulation)(listed without Y/N)
  • Blue Team Assessment / SOC Maturity Review(listed without Y/N)
  • Purple Team Engagement(listed without Y/N)
  • AI/ML Security Assessment (Model, Prompt Injection, Data Poisoning)(listed without Y/N)
  • DevSecOps Assessment (CI/CD Pipeline Security)(listed without Y/N)
  • Container Security Assessment (Docker/Kubernetes)(listed without Y/N)
  • Microservices & API Gateway Security Review(listed without Y/N)
  • Zero Trust Architecture Assessment(listed without Y/N)
  • SaaS Security Assessment (O365, Google Workspace, Salesforce)(listed without Y/N)
  • Infrastructure Security Audit (Servers, OS Hardening)(listed without Y/N)
  • Identity & Access Management (IAM) Assessment(listed without Y/N)
  • Privileged Access Management (PAM) Review(listed without Y/N)
  • Data Loss Prevention (DLP) Assessment(listed without Y/N)
  • Encryption & Key Management Review(listed without Y/N)
  • Risk Assessment & Gap Analysis(listed without Y/N)
  • Third-Party / Vendor Risk Assessment(listed without Y/N)
  • Data Privacy Assessment (GDPR, DPDP Act India)(listed without Y/N)
  • Security Policy & Procedure Review(listed without Y/N)
  • Business Continuity & Disaster Recovery (BCP/DR) Testing(listed without Y/N)
  • Threat Hunting Services(listed without Y/N)
  • Threat Intelligence Assessment(listed without Y/N)
  • Dark Web Monitoring(listed without Y/N)
  • SIEM Use Case Review & Optimization(listed without Y/N)
  • Log Management & Detection Engineering(listed without Y/N)
  • Incident Response Readiness Assessment(listed without Y/N)
  • Digital Forensics & Incident Investigation(listed without Y/N)
  • Ransomware Readiness Assessment(listed without Y/N)
  • Tabletop Exercises / Cyber Drills(listed without Y/N)
  • IoT Security Assessment(listed without Y/N)
  • Smart Device / Embedded System Testing(listed without Y/N)
  • Telecom Security Assessment(listed without Y/N)
  • Healthcare Security (HIPAA-aligned)(listed without Y/N)
  • Automotive / Connected Vehicle Security(listed without Y/N)
  • Phishing Simulation & Awareness Training(listed without Y/N)
  • Secure Code Review (Manual + SAST)(listed without Y/N)
  • Developer Security Training(listed without Y/N)

Source: CERT-In empanelment list. Entries are self-reported and may change — verify with the auditor before engagement.

Looking for more CERT-In empanelled firms? View all 236 auditors →