CERT-In Empanelled Auditor
VISTA InfoSec
Mumbai, Maharashtra
Overview
VISTA InfoSec is empanelled by CERT-In as an information security auditing organisation, auditing since 2004 and headquartered in Mumbai, Maharashtra. It is authorised to carry out security audits for government bodies, regulated entities (RBI, SEBI, IRDAI), and commercial organisations under the CERT-In empanelment programme.
Capability snapshot self-reported by the auditor on 2025-09-12.
Contact Details
- Address
- 001, Neoshine House, New Link Road, Andheri West, Mumbai - 400053
- Phone
- +91-9029236292
- Contact person
- Supriya Deshpande
Audit Capabilities
Capability snapshot self-reported to CERT-In. 13 capabilityies explicitly supported.
Supported
- Compliance audits (ISO 27001, PCI, IEC 62443, SOC 2, etc.)
- Finance sector audits (SWIFT, ATM, CBS, API, payment gateway)
- Mobile application security testing
- Web application security audit
- Wireless security audit
- Hardening / configuration review
- Network security audit
- Endpoint / DLP / email security audit
- Cloud security audits
- Regulatory compliance (RBI / SEBI / IRDAI / NPCI)
- Data privacy / DPDP / GDPR audit
- Vulnerability assessment and penetration testing
- IS policies, procedures and ISMS consulting
37 additional capability areas were not reported by the auditor on their last snapshot.
Service lines as listed
- Information security policy review and assessment against best security practices
- Information Security Testing
- Communications Security Testing
- Application security testing
- Wireless Security Testing
- Physical Access Controls & Security Testing
- Network Security Testing
- Software Vulnerability Assessment
- Compliance audits (ISO 27001, IEC 62443, IEC 27019, PCI, etc.)
- Finance Sector Audits (Swift, ATMs, API, Payment Gateway etc.)
- Cloud security Audits
- Compliance audits (ISO 27001, PCI, etc.)
- Regulatory Compliances (RBI, HIPPA, FISMA etc.)
- PCI-DSS & PCI SSF Advisory & Audit
- Privacy Assessment (GDPR / HIPAA / PDPA / DPDP)
- SOC1 / SOC2 / SOC3
- DLP Compliance Management
- GRC Consulting
- Infrastructure Security Audit
- Internal/External Penetration Testing
- Client-Side Penetration Testing
- Mobile Device Penetration Testing
- White-Box/Black-Box Mobile Application Security
- Grey-Box/Black-Box/White-Box Web Application Security Audit
- Secure Configuration Reviews
- Firewall Rule Base Review Audits
Source: CERT-In empanelment list. Entries are self-reported and may change — verify with the auditor before engagement.
Looking for more CERT-In empanelled firms? View all 236 auditors →