CERT-In Empanelled Auditor
Secnuo Consulting (OPC) Private Limited
Pune, Maharashtra
CERT-In EmpanelledVAPT Capable
Overview
Secnuo Consulting (OPC) Private Limited is empanelled by CERT-In as an information security auditing organisation, auditing since 2020 and headquartered in Pune, Maharashtra. It is authorised to carry out security audits for government bodies, regulated entities (RBI, SEBI, IRDAI), and commercial organisations under the CERT-In empanelment programme.
Capability snapshot self-reported by the auditor on 2025-01-08.
Contact Details
- Address
- Office No. 202, Leela Grandeur, Solapur-Pune Highway, Pune, Maharashtra, India, 412307
- Website
- https://www.secnuo.com
- Phone
- (+91) 832-931-1869
- Contact person
- Ms. Anupama Srivastava — Director
Audit Capabilities
Capability snapshot self-reported to CERT-In. 37 capabilityies explicitly supported.
Supported
- Compliance audits (ISO 27001, PCI, IEC 62443, SOC 2, etc.)
- Finance sector audits (SWIFT, ATM, CBS, API, payment gateway)
- API security testing
- Mobile application security testing
- Web application security audit
- Wireless security audit
- Telecom / 5G security audit
- ICS / OT / SCADA audits
- Device / IoT / embedded security audit
- Thick client / stand-alone application audit
- Hardening / configuration review
- Network security audit
- Endpoint / DLP / email security audit
- Cloud security audits
- Payment gateway / payment system audit
- Compliance audit as per Government of India guidelines
- UIDAI AUA / KUA audit
- Regulatory compliance (RBI / SEBI / IRDAI / NPCI)
- Data localisation audit
- Data privacy / DPDP / GDPR audit
- Source code review / SAST / SCA
- Red team assessment
- Breach and attack simulation / ransomware simulation
- Social engineering / phishing simulation
- Vulnerability assessment and penetration testing
- Database security audit
- Security architecture review
- ERP audit
- Cyber security / SOC audit
- Digital forensics / incident response
- Data centre audit
- Data migration audit
- DDoS assessment
- Risk / maturity / gap assessment
- Business continuity / DR audit
- Information systems audit (general / comprehensive)
- Functional / accessibility / interoperability testing
13 additional capability areas were not reported by the auditor on their last snapshot.
Service lines as listed
- Network Infrastructure VAPT and Security Audit
- Web Application VAPT and Security Audit
- Mobile Application VAPT and Security Audit
- API VAPT and Security Audit
- Microservices Security Testing
- Thick Client Application Security Testing
- Secure Code Review
- Red Teaming Assessment
- IOT Security Testing
- SCADA Security Assessment
- Wireless Security Audit
- Cloud Infra & Applications Security Assessment
- Security Architecture Review
- Secure Configuration Audit / Server Hardening Review
- Payment Switch Security Testing and Audit
- POS Application Security Testing and Audit
- POS Device Security Testing and Audit
- Database Security Audit & Assessment
- Data Center Security Audit & Assessment
- Social Engineering & Phishing Assessment
- Systems Security Assessment
- Telecom Security Audit
- ERP Security Audit & Assessment
- ITGC and GCC Audit
- Anti-Ransomware Controls Assessment
- Hardware Testing
- Load Testing / Performance Testing
- Functional Testing
- Accessibility Testing - GIGW
- Configuration & Compatibility Testing
- Scalability and Resiliency Audit
- Malware Analysis
- Digital Forensics & Incident Response (DFIR)
- Email Forensics
- SIEM / SOC / MSSP
- Compliance Audit as per Government Guidelines
- ISO 27001, ISO 22301, ISO 20000, ISO 25000, ISO 27701 Audit
- Finance Sector Audits
- Telecom Audit
- Information Systems Audit
- IT Risk Assessment
- Data Migration Audit
- UIDAI AUA / SUB-AUA / KUA / AEPS Audit
- e-Sign Compliance Audit
- SOC 1 Type 2 Audit (SSAE18 & ISAE3402)
- Data Localization System Audit (SAR)
- Compliance of Cyber Security Assessment Framework (CSAF)
- Healthcare System Security Audit
- GDPR Audit
- HIPAA Audit
- Tokenization System Audit
- PAPG System Audit
- PPI System Audit
- SEBI CSCRF Audit
- UPI System Audit
- ISNP System Audit
- RBI DPSC System Audit
- DPDPA Audit
- OEM Audit
- ATM Security Audit
- Vendor Security Audit
- Architecture and Design Audit
- Service Level Agreement (SLA) Audit
- Process Audit
Source: CERT-In empanelment list. Entries are self-reported and may change — verify with the auditor before engagement.
Looking for more CERT-In empanelled firms? View all 236 auditors →