AuditXYZ

CERT-In Empanelled Auditor

Tribastion Technologies Private Limited

Ahmedabad, Gujarat

CERT-In EmpanelledVAPT Capable

Overview

Tribastion Technologies Private Limited is empanelled by CERT-In as an information security auditing organisation, auditing since 2024 and headquartered in Ahmedabad, Gujarat. It is authorised to carry out security audits for government bodies, regulated entities (RBI, SEBI, IRDAI), and commercial organisations under the CERT-In empanelment programme.

Capability snapshot self-reported by the auditor on 2025-10-07.

Contact Details

Address
4th Floor, Commercial Tower- I, INSPIRE Business Park, Adani Shantigram Township, Vaishnodevi Circle, S.G. Highway, Ahmedabad - 382421, Gujarat, India
Contact person
Ishika Jain — E-mail : ishika.jain[at]tribastion.com

Audit Capabilities

Capability snapshot self-reported to CERT-In. 19 capabilityies explicitly supported.

Supported

  • Finance sector audits (SWIFT, ATM, CBS, API, payment gateway)
  • Mobile application security testing
  • ICS / OT / SCADA audits
  • Device / IoT / embedded security audit
  • Hardening / configuration review
  • Network security audit
  • Compliance audit as per Government of India guidelines
  • Regulatory compliance (RBI / SEBI / IRDAI / NPCI)
  • Data privacy / DPDP / GDPR audit
  • Red team assessment
  • Breach and attack simulation / ransomware simulation
  • Social engineering / phishing simulation
  • Vulnerability assessment and penetration testing
  • Cyber security / SOC audit
  • Managed security services / monitoring
  • Threat hunting / compromise assessment
  • Digital forensics / incident response
  • Concurrent / continuous audit
  • Risk / maturity / gap assessment

31 additional capability areas were not reported by the auditor on their last snapshot.

Service lines as listed

  • Web/API/Mobile Application Security Assessment (SAST/DAST/IAST/Load Testing)(listed without Y/N)
  • SOC/MDR (Security Operations and Monitoring including Incident response and Cyber(listed without Y/N)
  • Forensics Services (DFIR))(listed without Y/N)
  • OT/ICS/Scada/IoT Compliance audits (ISO 27001, IEC 62443, IEC 27019, etc.)(listed without Y/N)
  • Automobile/ Fleet Security Monitoring/ Connected Vehicle security Assessment(listed without Y/N)
  • Critical Infrastructure Security Testing & Control Implementation (Power(listed without Y/N)
  • Generation/distribution, Secure Meter)(listed without Y/N)
  • Vulnerability Assessment and Penetration Testing (IT/OT/Cloud/Kubernetes/Docker)(listed without Y/N)
  • Network Vulnerability Assessment (IT/OT/Cloud/IoT/Emerging Tech)(listed without Y/N)
  • Continuous external exposure assessment (Dark Web Monitoring/ Threat intelligence)(listed without Y/N)
  • Regulatory Compliance Audit (SEBI/RBI/UIDAI/PCI DSS/Data Privacy/GIGW/CEA guidelines/NCIIPC etc.)(listed without Y/N)
  • Data Privacy Assessment (including ROPA, DPIA, & Implementations for DPDP, GDPR, thers)(listed without Y/N)
  • TPRM (Supplier/Vendor/3rd Party Risk Assessment)(listed without Y/N)
  • AI Application Security/Integration Assessment(listed without Y/N)
  • Finance Sector Audits (Swift, SAR, ATMs, ERP, FINACLE, Payment Gateway etc.)(listed without Y/N)
  • Continuous Red Team Assessment, as per IRDAI’s guidelines with SCAP format report.(listed without Y/N)
  • Compromise Assessment/Threat hunting(listed without Y/N)
  • Continuous Threat and Exposure Management (CTEM)(listed without Y/N)
  • Cyber Security Awareness Program (Phishing/Vishing/Smishing/Awareness Trainings)(listed without Y/N)
  • Breach and Attack Simulation (BAS)(listed without Y/N)
  • IS Audit (Configuration review/VAPT/ Policy review/Data Localization)(listed without Y/N)
  • Triage as a Service (Manage Bug Bounty Service)(listed without Y/N)

Source: CERT-In empanelment list. Entries are self-reported and may change — verify with the auditor before engagement.

Looking for more CERT-In empanelled firms? View all 236 auditors →