A senior security head on retainer for Indian banks, NBFCs, regulated firms and companies building the function for the first time — backed by empanelled audit, VAPT, and certification training when the team needs the skill.
AiCyber.Guru exists to help Indian organisations build a security function that holds up when somebody checks — a regulator, a board, an auditor, or a customer’s security questionnaire. Most firms do not need more security noise. They need someone senior enough to decide what matters, and evidence a third party will accept.
The practice is led by Somendra Nath Tiwari — CISSP, with ISO/IEC 27001 and ISO/IEC 42001, and works across four lines: vCISO advisory, CERT-In empanelled audits through a governed partner panel, VAPT, and official EC-Council certification training. The accreditation is how the training is delivered — it is not what defines the firm.
To give an Indian organisation the security judgement of a full-time CISO, without the full-time salary — and the evidence to prove the work was done properly.
Small enough that you always get the practitioner. Accountable enough to name the partner firm when we bring one in, before you sign anything.
The person who scopes the engagement does the work. No account manager relaying messages to a delivery team you never meet.
Findings rated by exploitability, not scanner severity. Board-ready reporting, and a re-test after you have fixed things.
Where an engagement needs CERT-In empanelment, the partner firm is named to you before you sign, and you may speak to them directly.
Official EC-Council certification for your team — most useful bought after an audit, when the findings show which skills are missing.
Thirty minutes to work out whether there is a real engagement here. If there is not, we will say so.
AiCyber.Guru is an EC-Council Accredited Training Centre — that accreditation covers how our certification training is delivered. Advisory, audit and testing work is delivered by the practice on its own credentials.
Frameworks we work against
