Certbar Security

Certbar Security Pvt. Ltd. is a cybersecurity consultancy empanelled by CERT-In and certified to ISO 27001:2022. The organisation provides security consulting and managed security services and is headquartered in India. Public material indicates operations across multiple geographies, with a stated presence in 14+ countries and a customer base exceeding 60 organisations.

Services and capabilities

• Penetration testing and red teaming: web, mobile, network, cloud (including Azure) assessments; delivery of findings mapped to frameworks such as MITRE and prioritised remediation backlogs.
• Managed security services: 24/7 SOC monitoring, attack surface management, third‑party risk monitoring, and security operations support delivered as an extension of client teams.
• Vulnerability management and configuration assessment: discovery, prioritisation, tracking and verification of remediation across IT assets and cloud infrastructure.
• Privacy and data governance: privacy program design, data discovery, data lineage, product privacy assessments and consent management aligned to data lifecycle processes.
• Compliance and audit support: preparation, internal audit readiness and sustainment for standards and regulations referenced include PCI, HIPAA, SOC 2 (Type I & II), ISO 27001:2022 and the DPDP Act, 2023.
• AI/ML model security: security monitoring and testing approaches for ML/DL and large language models including application security testing (DAST/IAST/SAST), runtime protections (RASP/WAF) and model security monitoring.

Industry focus

• Healthcare: delivery of HIPAA‑aligned data security and privacy strategies focused on safeguarding patient data.
• Manufacturing: security strategy and controls aimed at protecting production lines and industrial intellectual property.
• Financial technology: design and implementation of cybersecurity measures for financial systems and customer data protection.
• SaaS/cloud providers: cloud infrastructure and application security assessments and strategy work to support platform resilience.

Technology and delivery approach

Engagements commonly combine offensive security assessments (penetration testing and red teaming), defensive operations (SOC monitoring and managed services), and governance activities (privacy, compliance and internal audit support). Technical themes include integration of findings into prioritised risk backlogs, mapping to established frameworks, continuous vulnerability hunting, automation of monitoring and attack surface management, and application of specialised testing techniques for AI/ML systems. Delivery models include project‑based assessments, ongoing managed services, and staff augmentation for security operations and compliance functions.

People and certifications

Leadership names listed in public material include Nirav Goti (Co‑Founder & COO) and Yash Goti (Co‑Founder & CEO). The organisation highlights ISO 27001:2022 certification and empanelment by CERT‑In.