Security services · Overview

Cybersecurity services, end to end.

AI security is our first focus, but attackers do not stop at your chatbot. We test, watch, respond and help you prove compliance across your whole organisation, with the same plain-language reports and fixed fees.

Get a fixed-price quote See the services map
Fixed fees, free retests24/7 SOC and incident lineVendor-neutral advice
across services · sample● demo
  1. BLOCKED Phishing link blocked at the email gateway
  2. FOUND Exposed admin panel found in a VAPT
  3. FLAGGED Impossible-travel login flagged by the SOC
  4. FIXED Risky firewall rule removed
  5. PASSED ISO 27001 internal audit passed
In plain words

HanulSec’s security services cover the whole cycle of protecting an organisation: set the rules (compliance and GRC), find weak spots (penetration testing, vulnerability management and cloud reviews), close the gaps (network security, zero trust and staff training), watch around the clock (managed SOC) and respond when something happens (incident response and forensics). Every service maps to the NIST Cybersecurity Framework 2.0, so you can see where each one fits.

Services
11 security services
Framework
NIST CSF 2.0
Serving
India, UAE, Saudi Arabia, worldwide
Pricing
Fixed fee or monthly
The services map

Where each service fits.

The NIST Cybersecurity Framework 2.0 splits security into six jobs: govern, identify, protect, detect, respond and recover. Here is how our services cover each one. Click any box to see the details.

Map of HanulSec security services on the six functions of the NIST Cybersecurity Framework 2.0 Govern: compliance and GRC, AI compliance. Identify: penetration testing, vulnerability management, cloud review. Protect: zero trust, network security, security awareness. Detect: managed SOC and MDR, red team. Respond: incident response, digital forensics. Recover: recovery through incident response. AI security has its own set of tests. Each part links to its service page. 01 · GOVERNset the rules COMPLIANCE & GRC ISO 27001 · SOC 2 GRC → AI COMPLIANCE DPDP · ISO 42001 AI READINESS → 02 · IDENTIFYfind weak spots PENETRATION TESTS web · API · mobile VAPT → VULNERABILITY MGMT scan, rank, fix CONTINUOUS → CLOUD REVIEW AWS · Azure · GCP CLOUD → 03 · PROTECTclose the gaps ZERO TRUST identity-first ROADMAP → NETWORK SECURITY firewalls · NDR NETWORK → AWARENESS phishing drills PEOPLE → 04 · DETECTspot attacks fast MANAGED SOC / MDR 24/7 detection 24/7 SOC → RED TEAM test your defenders ADVERSARY → 05 · RESPONDstop the damage INCIDENT RESPONSE contain, clean up 24/7 LINE → DIGITAL FORENSICS evidence for court FORENSICS → 06 · RECOVERback to normal RECOVERY rebuild, harden IR RETAINER → AI SECURITY · OUR FIRST FOCUS chatbots, voice agents, AI agents, MCP servers and AI search get their own tests AI SECURITY →

Scroll sideways to see the whole map, or use the list below.

All services

Eleven ways we protect your business.

Not sure where to start? Most companies begin with a penetration test, to see what an attacker would find, or with 24/7 monitoring if nobody is watching today.

How we work

The same promises, whatever the service.

  • Fixed fees

    A clear price before we start, never billed by the number of findings.

  • Engineers, not salespeople

    The person who scopes your work is a security engineer.

  • Plain-language reports

    A summary leaders can read in five minutes, and detail for your team.

  • Free retests

    We check your fixes at no extra cost.

  • Vendor-neutral advice

    We recommend what fits you, and work with the tools you already own.

  • NDA first

    A mutual NDA before you share any detail.

Frameworks

Built on the frameworks your auditors use.

NIST CSF 2.0Govern to recover
ISO/IEC 27001Information security
SOC 2Trust Services Criteria
PCI DSS v4.0Card data security
MITRE ATT&CKAdversary behaviour
CIS BenchmarksSecure configuration
CERT-InDirections and audit guidelines
DPDP Act 2023With the DPDP Rules 2025

Emblems are HanulSec’s own artwork showing which frameworks our work maps to. They are not the owners’ logos and do not mean HanulSec is certified against them.

Questions

Questions about our services.

Q01What cybersecurity services does HanulSec offer?
Penetration testing (VAPT), red team operations, a 24/7 managed SOC and MDR, incident response, cloud security, network security, vulnerability management, compliance and GRC (ISO 27001, SOC 2, PCI DSS), security awareness training, digital forensics and zero trust architecture, plus a full set of AI security services.
Q02What is VAPT, and do we need it?
VAPT stands for vulnerability assessment and penetration testing: finding weaknesses in your systems and proving which ones an attacker could use. Most companies need it at least once a year, after big changes, and before customer or certification audits.
Q03Do you work with small companies?
Yes. Many of our services, such as an AI-built app check, a penetration test or ISO 27001 readiness, are sized for start-ups and small teams, with fixed fees agreed upfront.
Q04Can you work with our existing tools and providers?
Yes. We are vendor-neutral and work with the security tools, cloud platforms and IT partners you already have.
Q05Do you serve clients outside India?
Yes. We serve India first, then the UAE, Saudi Arabia and clients worldwide, with most work done remotely from Bengaluru and on-site visits when needed.
Q06How do we start?
Request a quote or email hello@hanulsec.com. A security engineer replies within one business day and offers a free 30-minute scoping call, followed by a fixed-price proposal.
Next hops

Explore more

Request a quote

Scope it in two minutes.

Tell us what you need protected. A security engineer, not a salesperson, replies with a fixed-price proposal.

Start your quote hello@hanulsec.com
  • Reply within one business day
  • Free 30-minute scoping call
  • Mutual NDA before any detail is shared
  • Fixed price, free retest of fixed findings