Scope, fee and working days are published on every engagement
Committed credentials found and rotated, vulnerable packages mapped, and scanning added so secrets stop reaching your repositories.
01 Overview
A repository that has never been scanned can hold a working credential deep in its history, and deleting the file does not remove it from earlier commits. We scan the full history, check which of the secrets found are still valid, and help you rotate them in an order that avoids outages. We also deal with dependency hygiene: outdated packages with known vulnerabilities, an upgrade path that will not swallow a month, and automated scanning that catches the next problem at the pull request.
02 Deliverables
7 items03 Outcomes
04 Process
05 Fit & inputs
These inputs are collected through the technical brief in your dashboard after payment. The duration is counted from when they arrive.
06 Answers
Yes, but that rewrites history and disrupts every existing clone. Rotation is usually the better choice, and we explain why for your case.
Treat it as compromised and rotate it at once. We handle those on the first day.
Yes, including npm, Composer and PyPI mirrors, provided you give us access.
REL Related
Manual penetration testing of your web application with evidence for each finding and a retest, so real risks are fixed and proven fixed.
Manual penetration test of authentication, authorisation and business logic
Fixed fee · GST incl.
₹29,999
Duration
12 working days
Technical controls and automated evidence collection for a SOC 2 Type II audit, operating before your observation window opens.
Control gap assessment against the Trust Services Criteria in scope
Fixed fee · GST incl.
₹44,999
Duration
30 working days
A gap assessment against the DPDP Act, 2023 covering consent, retention, notices and breach handling, with a prioritised remediation plan.
Inventory of personal data held across your systems, vendors and storage locations
Fixed fee · GST incl.
₹22,999
Duration
15 working days
GST included
₹12,999
Next step