CERT-In Empanelled Auditor
Security Brigade InfoSec Pvt. Ltd
Mumbai, Maharashtra
Overview
Security Brigade InfoSec Pvt. Ltd is empanelled by CERT-In as an information security auditing organisation, auditing since 2006 and headquartered in Mumbai, Maharashtra. It is authorised to carry out security audits for government bodies, regulated entities (RBI, SEBI, IRDAI), and commercial organisations under the CERT-In empanelment programme.
Capability snapshot self-reported by the auditor on 2021-07-01.
Contact Details
- Address
- 3rd Floor, Kohinoor Estate, Lower Parel, Mumbai - 400013
- Phone
- +919004041456
- Contact person
- Ms. Jamila Pittalwala
Audit Capabilities
Capability snapshot self-reported to CERT-In. 17 capabilityies explicitly supported.
Supported
- Compliance audits (ISO 27001, PCI, IEC 62443, SOC 2, etc.)
- Finance sector audits (SWIFT, ATM, CBS, API, payment gateway)
- Mobile application security testing
- Web application security audit
- Wireless security audit
- ICS / OT / SCADA audits
- Thick client / stand-alone application audit
- Hardening / configuration review
- Network security audit
- Cloud security audits
- Source code review / SAST / SCA
- Red team assessment
- Social engineering / phishing simulation
- Managed security services / monitoring
- Dark web / brand / attack surface monitoring
- Digital forensics / incident response
- IS policies, procedures and ISMS consulting
33 additional capability areas were not reported by the auditor on their last snapshot.
Service lines as listed
- Network security audit(listed without Y/N)
- Web-application security audit(listed without Y/N)
- Wireless security audit(listed without Y/N)
- Compliance audits (ISO 27001, IEC 62443, IEC 27019, PCI, etc.)(listed without Y/N)
- Finance Sector Audits (Swift,ATMs, API, Payment Gateway etc.)(listed without Y/N)
- ICS/OT Audits(listed without Y/N)
- Cloud security Audits(listed without Y/N)
- Red Team Assessment(listed without Y/N)
- Web Application Penetration Testing(listed without Y/N)
- Mobile Application Penetration Testing(listed without Y/N)
- Network Penetration Testing(listed without Y/N)
- Network Vulnerability Assessment(listed without Y/N)
- Web Application Automated Vulnerability Assessment(listed without Y/N)
- WAP Application Penetration Testing(listed without Y/N)
- Thick Client Penetration Testing(listed without Y/N)
- Firewall Configuration Review(listed without Y/N)
- Wireless Penetration Testing(listed without Y/N)
- Server Configuration Review(listed without Y/N)
- Database Configuration Review(listed without Y/N)
- Source Code Review(listed without Y/N)
- Email Configuration Review(listed without Y/N)
- Network Architecture Review(listed without Y/N)
- Process and Policy Review(listed without Y/N)
- Incident Response(listed without Y/N)
- Spear Phishing Activity(listed without Y/N)
- Data Leakage Gap Analysis(listed without Y/N)
- Defacement Monitoring(listed without Y/N)
- Forensics Investigation & Analysis(listed without Y/N)
- Application Malware Scan(listed without Y/N)
- Network Malware Scan(listed without Y/N)
Source: CERT-In empanelment list. Entries are self-reported and may change — verify with the auditor before engagement.
Looking for more CERT-In empanelled firms? View all 236 auditors →