About · HanulSec

About HanulSec, security for the AI era.

HanulSec tests and protects the AI that companies now run on, alongside the classic security every business still needs. We are based in Bengaluru and work with companies across India, the Gulf and beyond.

Office in Koramangala, BengaluruA brand of HanulX Private LimitedISO 27001 and 42001 in progress
In plain words

HanulSec is an AI security and cybersecurity firm based in Koramangala, Bengaluru, and a brand of HanulX Private Limited. We red-team AI chatbots, voice agents, AI agents and MCP servers for prompt injection, data leaks and misuse; prepare companies for the DPDP Act, CERT-In, ISO/IEC 42001, SOC 2 and the EU AI Act; and provide penetration testing (VAPT), a 24/7 managed SOC and incident response. We serve India first, then the UAE, Saudi Arabia and clients worldwide.

Founded
2026
Office
Koramangala, Bengaluru
Company
HanulX Private Limited
Markets
India · UAE · Saudi · Worldwide
What we do

AI security first. Everything else, too.

AI changed what needs protecting. Most of our work is testing and securing the AI a business runs, and our classic security services come from the same team.

  • AI security

    Red teaming for chatbots, voice agents, AI agents and MCP servers, AI search leak tests, shadow AI discovery and deepfake drills. Nine AI services →

  • Classic security

    Penetration testing (VAPT), red team operations, a 24/7 managed SOC, incident response, cloud, network and zero trust. Eleven services →

  • Compliance readiness

    The DPDP Act, CERT-In, RBI, SEBI and IRDAI, ISO 27001 and 42001, SOC 2, the EU AI Act and Gulf rules. Ten guides →

Our name

Why “Hanul”?

Hanul (하늘) is Korean for “sky”, and 하늘 보안 (hanul boan) means “sky security”.

It suits the work. Good security needs the view from above: the whole picture, from the chatbot on your website and the agent in your inbox to the servers and cloud accounts behind them, not one tool or one test at a time.

How we work

Nine commitments, written into every contract.

What every client gets from the first day. None of it depends on the size of the project.

  • Written permission first

    We test only what you list in writing, in the time window you approve, from addresses you can allow-list.

  • A fixed price

    A fixed-price proposal within one business day, so the bill never surprises you.

  • Engineers, not salespeople

    Your free 30-minute scoping call is with a security engineer who can answer real questions.

  • A mutual NDA

    Signed before you share any detail about your systems.

  • Proof you can replay

    Every finding comes with evidence: requests, attack transcripts, screenshots and the steps to reproduce it.

  • A free retest

    Once you have fixed the findings, we test them again at no cost.

  • Our own team

    Engagements are delivered in-house. We do not hand your project to an unnamed subcontractor.

  • A 24/7 incident line

    If something goes wrong at any hour, call +91 0080887899.

  • Reports people can read

    Every report opens with a plain-language summary for leadership, before the technical detail.

Straight answers

What we are, and what we will not claim.

Security is a trust business, so here is the plain truth about where we stand today.

What we are

  • An AI-first security firm, founded in 2026 in Bengaluru
  • Working towards ISO/IEC 27001 and ISO/IEC 42001 certification, with controls aligned to ISO/IEC 27002
  • Ready to prepare you for audits and work alongside your CERT-In empanelled auditor
  • Testing to public standards: the OWASP Top 10 lists, MITRE ATLAS and NIST

What we will not claim

  • Certifications we do not hold yet. This page will change the day they are issued.
  • To be a CERT-In empanelled auditor. We are not one.
  • Client logos, case studies or testimonials without the client’s written permission
  • That any system is “100% secure” after a test
Where we work

One office, clients across borders.

Our only office is in Bengaluru. Most testing is done remotely and safely, and on-site visits are arranged when a project needs one.

Contact

How to reach us.

  • Quotes and questions

    hello@hanulsec.com. A security engineer replies within one business day.

  • Incident response

    ir@hanulsec.com, or call the 24/7 line on +91 0080887899.

  • Report a vulnerability

    Found a flaw in our own systems? Write to security@hanulsec.com. See our disclosure terms.

  • Office

    AVS Layout, Koramangala, Bengaluru 560095, Karnataka, India. Visits by appointment.

  • Company

    HanulSec is a brand of HanulX Private Limited.

  • Working hours

    Monday to Friday, 9:00 to 18:00 India time. The incident line answers at any hour.

Questions

Questions about us.

Q01Where is HanulSec based?
Our only office is at AVS Layout, Koramangala, Bengaluru 560095, India. We serve companies across India, the UAE, Saudi Arabia and worldwide from there, mostly remotely.
Q02Does HanulSec hold ISO 27001 or ISO 42001 certification?
Not yet. Both certifications are in progress, and our controls are aligned with ISO/IEC 27002. We will say so on this page as soon as they are issued.
Q03Is HanulSec a CERT-In empanelled auditor?
No. We prepare organisations for CERT-In audits, test their systems including AI, and work alongside the empanelled auditor they appoint.
Q04Who will actually test our systems?
Our own security engineers, under a signed agreement and a mutual NDA. We do not hand engagements to subcontractors.
Q05How do we report a vulnerability in HanulSec’s own website or systems?
Email security@hanulsec.com with the details. Please give us reasonable time to fix it before sharing it publicly. Our terms describe how we handle reports.
Request a quote

Scope it in two minutes.

Tell us what you need protected. A security engineer, not a salesperson, replies with a fixed-price proposal.

  • Reply within one business day
  • Free 30-minute scoping call
  • Mutual NDA before any detail is shared
  • Fixed price, free retest of fixed findings