CERT-In Empanelled Auditor
Suma Soft Private Limited
Pune, Maharashtra
Overview
Suma Soft Private Limited is empanelled by CERT-In as an information security auditing organisation, auditing since : 2008 and headquartered in Pune, Maharashtra. It is authorised to carry out security audits for government bodies, regulated entities (RBI, SEBI, IRDAI), and commercial organisations under the CERT-In empanelment programme.
Capability snapshot self-reported by the auditor on 2026-08-17.
Contact Details
- Address
- Suma Center, 2nd Floor, Opp. Himali Society, Erandawane, Pune, Maharashtra – 411 004
- Contact person
- Mr. Milind Dharmadhikari
Audit Capabilities
Capability snapshot self-reported to CERT-In. 15 capabilityies explicitly supported.
Supported
- Compliance audits (ISO 27001, PCI, IEC 62443, SOC 2, etc.)
- API security testing
- Mobile application security testing
- Web application security audit
- Wireless security audit
- Network security audit
- Cloud security audits
- Regulatory compliance (RBI / SEBI / IRDAI / NPCI)
- Source code review / SAST / SCA
- Red team assessment
- Breach and attack simulation / ransomware simulation
- Managed security services / monitoring
- Dark web / brand / attack surface monitoring
- Digital forensics / incident response
- Risk / maturity / gap assessment
35 additional capability areas were not reported by the auditor on their last snapshot.
Service lines as listed
- Cyber Security Audits
- Information Security Assessments
- Web Application Security Testing
- Mobile Application Security Testing
- API Security Testing
- Vulnerability Assessment/Penetration Testing of IT Infrastructure
- Network Security Audits
- Wireless Security Testing
- Compliance Audits (ISO 27001, PCI, BCMS etc.)
- Software License Compliance Audits
- Compliance - IT Audits
- (Based on guidelines issued by RBI, IRDA, SEBI, Stock Exchanges)
- Digital Forensic Investigations
- Secure Source Code Analysis as a Service
- Security Monitoring as a Service
- Third Party Security Assessments / Information Security Due Diligence
- Cloud Security & Compliance Assessment
- Digital Risk / Dark Web Assessment
- Breach & Attack Simulation as a Service
- Red Team Assessment
- Adversarial Security Assessment
- External Attack Surface Assessment
Source: CERT-In empanelment list. Entries are self-reported and may change — verify with the auditor before engagement.
Looking for more CERT-In empanelled firms? View all 236 auditors →