ROOTNIK Labs Cybersecurity Private Limited

Overview

ROOTNIK Labs Cybersecurity Private Limited is empanelled by CERT-In as an information security auditing organisation, auditing since 2023 and headquartered in Kolkata, West Bengal. It is authorised to carry out security audits for government bodies, regulated entities (RBI, SEBI, IRDAI), and commercial organisations under the CERT-In empanelment programme.

Capability snapshot self-reported by the auditor on 2025-10-08.

Contact Details

Address

BL-257, Sector-II, Salt Lake City, Kolkata- 700 091, West Bengal, India

Phone

9735 717 763

Contact person

Arindam Halder

[email protected]

Audit Capabilities

Capability snapshot self-reported to CERT-In. 35 capabilityies explicitly supported.

14 additional capability areas were not reported by the auditor on their last snapshot.

Service lines as listed

• Vulnerability Assessment & Penetration Testing
• Network Security Audit
• Web-Application Security Audit
• Wireless Security Audit
• Compliance audits (ISO 27001, IEC 62443, IEC 27019, PCI, etc.)
• Finance Sector Audits (Swift, ATMs, API, Payment Gateway etc.)
• ICS/OT/SCADA Security Audits
• Cloud Security Audits / Cloud Infrastructure Configuration Audits
• Active Directory Security Assessments
• AI (Artificial Intelligence) & ML (Machine Learning) Security Audit
• API / Microservices Security Audit / Penetration Testing
• Application Security Architecture Review
• Assumed Breach Exercise
• Blockchain and Cryptocurrency Security Audit / Smart Contract Audit
• Brand and External Attack Surface Monitoring
• Breach and Attack Simulation (BAS)
• Red Teaming Engagement
• Configuration Review / Hardening (Servers, Firewalls, Databases, Network Devices, Endpoints, etc.)
• Container / Docker / Kubernetes Security Audit & Hardening
• Content Delivery Network (CDN) Security Audit
• Cyber and System Audits
• Cyber Forensic Investigations & Incident Response (DFIR)
• Cyber Resilience Audit
• Cyber Security Maturity Assessment
• Cyber Security Monitoring & Incident Review
• Cyber Threat Intelligence / Open-Source Intelligence (OSINT)
• Data Migration Audit
• Database Security Audit & Assessment
• DDoS Assessment / Simulation
• Deep & Dark Web Analysis / Monitoring
• DevSecOps Assessment / Consulting
• Digital Forensic Investigations (Mobile, Computer, Network, Email, etc.)
• Domain & Email Exchange Audit
• Encryption Security Assessment
• Endpoint Security Audits
• Enterprise Security Architecture Review
• ERP Audit (SAP, Oracle, etc.)
• Firewall Auditing / Rule Review
• Incident Response (IR)
• Information Security Testing
• IOT (Internet of Things) Security Audit / Penetration Testing
• Managed Security Services (MSS) / Managed SOC
• Malware Analysis and Reverse Engineering
• Mobile Application Security Audit / Penetration Testing (Android & iOS)
• Network Architecture Review
• Open Source Software (OSS) Security Management Audit
• Penetration Testing (Infra/App)
• Phishing / Vishing / Whaling Assessment and Simulation
• Physical Access Controls & Security Testing
• Ransomware Readiness / Rescue Analysis
• Red Team / Blue Team / Purple Team Assessment
• Root Cause Analysis
• Secure Code Review (SAST) / Source Code Review
• Secure SDLC (Software Development Life Cycle) Review
• Security Awareness Training
• Social Engineering
• Software Composition Analysis (SCA)
• Software Vulnerability Assessment
• Supply Chain Security Audit / Third Party Risk Management (TPRM)
• Thick & Thin Client Application Security Audit
• Threat Assessment / Threat Hunting / Threat Modeling
• Virtualization Security Audit
• vCISO (Virtual Chief Information Security Officer) Services
• Web3 and LLM models Security Assessments
• Cyber Security Awareness Training