Everything Your Procurement Team
Needs to Onboard Us
Company details, certifications and onboarding documents in one place. Tell us what you need and we will send it to your team.
Company facts
iSpyCyber at a Glance
Legal entity
iSpyCyber Pvt. Ltd.
Registered in India, CIN U62012OD2024PTC047368. Our brand name is iSpyCyber.
Headquarters
Bhubaneswar, India
724, DLF Cybercity, Infocity, Patia, Bhubaneswar, Odisha 751024, India.
Other offices
Bengaluru and Santa Clara
2nd Floor, 1685, 27th Main Rd, HSR Layout, Bengaluru 560102, India. 1400 Bowe Ave #903, Santa Clara, California 95051, USA.
Certifications
ISO/IEC 27001 and ISO 9001
Certified information security and quality management systems. Certificate copies on request.
Services
31 services
Application security, governance, risk and compliance, adversary simulation, and cloud and infrastructure security. See all services.
Clients
40+ organisations
Enterprise and government clients in 15+ countries.
Delivery model
In-house team
Engagements are delivered by our own certified team and are not subcontracted.
Contact
in**@*******er.com
For documents, certificate copies and onboarding questions.
Documents
What We Can Provide
Ask for any of these during vendor onboarding.
ISO certificates
Copies of our ISO/IEC 27001 and ISO 9001 certificates.
On request
Mutual NDA
Our standard mutual non-disclosure agreement, signed before any technical details are shared.
On request
Capability statement
A one-page summary of our services, certifications, delivery model and offices.
On request
Sample VAPT report
A redacted example of the report your team receives. Download the sample report.
Available now
Need something else for onboarding?
Tell us what your procurement or security team needs and we will help.
How we work
From First Call to Final Report
Every engagement follows the same steps, so your teams know what to expect and when.
Step 01
Scoping call
We learn about your environment, objectives and any compliance requirements.
Output: Recommended scope
Step 02
Mutual NDA
We sign a mutual non-disclosure agreement before any technical details are shared.
Output: Signed NDA
Step 03
Proposal and rules
Scope, rules of engagement, test windows and contacts are agreed in writing.
Output: Signed scope and test plan
Step 04
Testing
We test within the agreed scope and report critical findings as soon as they are confirmed.
Output: Critical finding alerts
Step 05
Report and debrief
A risk-rated report with evidence and fixes, walked through with your teams.
Output: Report and debrief session
Step 06
Fix and retest
After you remediate, we retest each finding and confirm which issues are closed.
Output: Retest report
FAQ
Procurement questions, answered
Company and documents
How do we request your certificates or NDA?
Email in**@*******er.com or use our contact form and tell us which documents you need.
Do you subcontract any of the work?
No. Engagements are delivered by our own certified team and are not subcontracted.
Where are you based?
Our headquarters is in Bhubaneswar, India. We also have offices in Bengaluru, India and Santa Clara, California, USA, and serve clients in 15+ countries.
Delivery and data
Can you work within our data-residency requirements?
Yes. Where you need data to stay in a particular country or environment, we agree this in the contract and work within it.
What does an engagement deliver?
A risk-rated report with an executive summary and technical findings with evidence and fixes, a debrief with your team, and a retest report once you have remediated.
Still have a question? Talk to our team.