CERT-In Empanelled Auditor
John and Smith Solutions LLP
Kozhikode, Kerala
Overview
John and Smith Solutions LLP is empanelled by CERT-In as an information security auditing organisation, auditing since APRIL 2022 and headquartered in Kozhikode, Kerala. It is authorised to carry out security audits for government bodies, regulated entities (RBI, SEBI, IRDAI), and commercial organisations under the CERT-In empanelment programme.
Capability snapshot self-reported by the auditor on 2026-10-24.
Contact Details
- Address
- Government Cyberpark, KSITIL Special Economic Zone, Kozhikode, Kerala PIN: 673016
- Contact person
- Rahul Raju
Audit Capabilities
Capability snapshot self-reported to CERT-In. 30 capabilityies explicitly supported.
Supported
- Compliance audits (ISO 27001, PCI, IEC 62443, SOC 2, etc.)
- API security testing
- Mobile application security testing
- Web application security audit
- Wireless security audit
- Device / IoT / embedded security audit
- Thick client / stand-alone application audit
- Hardening / configuration review
- Network security audit
- Cloud security audits
- Payment gateway / payment system audit
- Compliance audit as per Government of India guidelines
- UIDAI AUA / KUA audit
- Regulatory compliance (RBI / SEBI / IRDAI / NPCI)
- Data localisation audit
- Data privacy / DPDP / GDPR audit
- Source code review / SAST / SCA
- Red team assessment
- Social engineering / phishing simulation
- Vulnerability assessment and penetration testing
- Security architecture review
- ERP audit
- Cyber security / SOC audit
- Managed security services / monitoring
- Digital forensics / incident response
- DDoS assessment
- Risk / maturity / gap assessment
- AI / ML security assessment
- Information systems audit (general / comprehensive)
- Functional / accessibility / interoperability testing
20 additional capability areas were not reported by the auditor on their last snapshot.
Service lines as listed
- Network Security Audit
- Web Application Security Audit
- Wireless Security Audit
- Compliance Audits / Gap Assessments (ISO/IEC 27001, ISO/IEC
- Cloud Security Audit
- Mobile Application Security Audit
- API / Web Services Security Audit
- Information Systems (IS) / GRC / IT Infrastructure Audit
- Data Privacy / Data Localisation Audit
- GIGW Audit
- Artificial Intelligence (AI) Security Audit
- IoT Security Assessment
- Regulatory Audits (RBI, SEBI, TRAI, eSign, UIDAI - AUA, KUA,
- ASA) Server and Database Configuration Audit
- Source Code Review / Secure Code Audit
- Load Testing / Performance Testing
- Functional Testing
- Interoperability Testing
- Accessibility Testing
- Red Team Assessment / Penetration Testing
- Firewall Configuration Review
- Cyber Forensics Audit
- Security Operations Centre (SOC) Audit and Assessment
- ERP Security Audit and Assessment
- Managed Security Services
- Incident Response Services
- Information Security Testing
- Process Security Testing
- Internet Technology Security Testing
- Communications Security Testing
- Physical Access Security Testing
- Software Vulnerability Assessment
- Assessment against Cyber Security Audit Baseline Requirements
- Comprehensive Cyber Security Audit (CERT-In Audit Guidelines)
- Security Audit / Safe-to-Host Certification
- CERT-In Directions 70B Compliance Assessment
- ABDM / Healthcare Application Security Audit (WASA)
- SBOM / QBOM / CBOM / AIBOM Assessment
- DPDP Act 2023 Compliance Assessment
- IRDAI Information and Cyber Security Guidelines Audit
- Payment System Audits (PA-PG, PPI, UPI - RBI)
- Security Architecture and Design Review
- Vendor / Third-Party Security Risk Assessment
- Social Engineering / Phishing Simulation Assessment
- Thick Client Application Security Testing
Source: CERT-In empanelment list. Entries are self-reported and may change — verify with the auditor before engagement.
Looking for more CERT-In empanelled firms? View all 236 auditors →