Zoho Corporation · Cybersecurity & endpoint protection
4.8App Advisor rating
Made in IndiaFree plan
Starts at
Free plan
Kratikal
by Kratikal · Noida, Uttar Pradesh · Since 2013
Security testing and awareness.
Cybersecurity & endpoint protectionMade in India
- Starting price
- Price on request
- Quoted by scope and assets
- Free trial / plan
- 15-day free trial
- AutoSecT, no credit card
- Deployment
- Cloud
- Web
- App Advisor rating
- 4.3
- transparency & India fit
What is Kratikal?
Kratikal is a Noida-headquartered cybersecurity company that started in 2013 at MNNIT Allahabad as a training outfit running cybersecurity workshops, and has grown into a CERT-In empanelled testing firm (empanelled in 2021) with offices in Pune, Mumbai and Bangalore and, since 2024-25, the UAE, Saudi Arabia and the USA. In 2026 it listed on the BSE as Kratikal Tech Limited. Its business mixes services (VAPT, compliance audits) with two products: AutoSecT, a pentest and vulnerability management platform launched in 2023, and ThreatCop, its older security awareness product.
The main reason Indian companies hire Kratikal is the CERT-In empanelment. RBI-regulated NBFCs, SEBI intermediaries and companies preparing for DPDP or ISO 27001 often need a VAPT report from an empanelled auditor, and Kratikal offers that along with audit support for ISO 27001, SOC 2, RBI and SEBI requirements. AutoSecT then keeps scanning between audits: web apps from a single URL with authenticated scans, Android APK and iOS IPA files, REST APIs, AWS, GCP and Azure posture, and internal or external networks.
AutoSecT's practical strengths are the reporting and workflow pieces. Findings are ranked by risk, tracked by severity until fixed, pushed into Jira, Slack, Microsoft Teams, Google Chat or Zoho Cliq, and exported as password-protected, co-branded PDF or Excel reports mapped to ISO 27001, NIST CSF 2.0 and SOC 2. Kratikal also issues VAPT certificates that can be verified online, which helps when a bank or enterprise client asks for proof.
On price, Kratikal publishes nothing. Both VAPT services and AutoSecT are quoted by scope, number of assets and engagement type, so expect a scoping call. AutoSecT does offer a 15-day free trial with no credit card, which is a fair way for a startup to see the quality of findings before committing. Deployment model (cloud vs on-premise) is not described on the product page, so ask if data residency matters to you.
What works well
- +CERT-In empanelled since 2021, so its VAPT reports satisfy many Indian regulators and clients
- +AutoSecT covers web, Android and iOS apps, APIs, cloud and network in one dashboard
- +15-day free AutoSecT trial with no credit card required
- +Findings sync to Jira, Slack, Microsoft Teams, Google Chat and Zoho Cliq
- +Reports map to ISO 27001, NIST CSF 2.0 and SOC 2, with co-branded PDF and Excel export
- +Audit support for RBI, SEBI and DPDP requirements alongside testing
- +Publicly listed on BSE from 2026, which gives more disclosure than a small private firm
What to watch out for
- −No public pricing for AutoSecT or VAPT engagements; everything is quoted
- −Product page does not say whether AutoSecT runs only in the cloud or can be self-hosted
- −Kratikal's own about page lists Noida as HQ but a 2015 timeline entry says New Delhi, which is confusing
- −Automated scanning still needs skilled staff to act on findings; it does not fix code for you
- −Kratikal says it is SOC 2 compliant, but its site does not list an ISO 27001 certificate of its own
Best suited for: NBFCs, fintechs and SEBI intermediaries needing VAPT from a CERT-In empanelled auditor · SaaS startups preparing for SOC 2 or ISO 27001 that want scanning plus audit help · Mid-size Indian companies wanting continuous scanning between annual audits · Teams shipping Android and iOS apps that need APK and IPA analysis
Kratikal at a glance
Analysing Kratikal — pricing, features, reviews and alternatives…
Generated by App Advisor's native engine from this listing's verified data — not a paid placement.
Kratikal features
Researched from Kratikal's official product pages · updated October 2026.
Scanning coverage
- Web app scanning with authentication
- Android APK and iOS IPA analysis
- REST API static and dynamic testing
- CSPM for AWS, GCP and Azure
- Internal and external network scans with POC validation
Risk management
- AI-verified findings to cut false positives
- Risk-based prioritisation
- Severity lifecycle tracking
- Central dashboard across projects
- Smart Scan Scheduler
Reporting and integrations
- PDF and Excel reports with password protection
- Co-branded reports
- Online-verifiable VAPT certificates
- Jira, Slack, Teams, Google Chat, Zoho Cliq
- SSO access
Compliance services
- ISO 27001 audit support
- SOC 2 readiness
- RBI and SEBI audit support
- DPDP Act readiness
- Gap assessment
AI capabilities
- AI-verified findings to reduce false positives in AutoSecT
Kratikal pricing (INR)
SourceEvery edition as published by the vendor · free trial: 15-day free trial of AutoSecT, no credit card required. Prices exclude GST unless stated. Full Kratikal pricing breakdown
AutoSecT trial
Free for 15 days
- No credit card required
- Aimed at startups and SMEs
- Try web, mobile, API, cloud and network scans
AutoSecT enterprise
Quote on request
- Full vulnerability management
- Multi-asset scanning
- Compliance mapping to ISO 27001, NIST CSF 2.0 and SOC 2
VAPT and compliance services
Quote on request
- CERT-In empanelled VAPT
- ISO 27001, SOC 2, RBI, SEBI and DPDP audit support
- Gap assessment
- • Kratikal publishes no prices; quotes depend on scope, asset count and engagement model
Buying for a team? App Advisor can get you a volume quote and any partner discount available.
Integrations, security & India
Integrations
- Jira
- Slack
- Microsoft Teams
- Google Chat
- Zoho Cliq
- SSO
- AWS
- Google Cloud
- Microsoft Azure
For Indian businesses
- CERT-In empanelled organisation since 2021, needed for many regulated Indian audits
- Audit support for RBI, SEBI and DPDP Act requirements
- Headquartered in Noida with offices in Pune, Mumbai and Bangalore
- VAPT certificates can be verified online and Kratikal says they are recognised in Indian compliance audits
- Listed on BSE in 2026 as Kratikal Tech Limited
Trust, compliance & who uses Kratikal
2013
In business since
Certifications & compliance
- CERT-In empanelment — Empanelled in 2021 Source
- SOC 2 — Kratikal states SOC 2 compliance from 2023 Source
- GDPR — Kratikal states GDPR compliance from 2022 Source
Each claim links to the vendor's own published statement. Always confirm current certificate validity directly with the vendor.
Kratikal timeline — releases & milestones
Is Kratikal the best choice for you?
Best choice if you are…
- NBFCs, fintechs and SEBI intermediaries needing VAPT from a CERT-In empanelled auditor
- SaaS startups preparing for SOC 2 or ISO 27001 that want scanning plus audit help
- Mid-size Indian companies wanting continuous scanning between annual audits
- Teams shipping Android and iOS apps that need APK and IPA analysis
Look elsewhere if you are…
- Buyers who need a published price list before any sales call
- Organisations wanting only a self-hosted open-source scanner with no vendor involvement
Still comparing? Get an unbiased shortlist and demos arranged for free.
Sources (4) · updated October 2026
Kratikal screenshots
Specifications
- Category
- Cybersecurity & endpoint protection
- Vendor
- Kratikal
- Headquarters
- Noida, Uttar Pradesh
- Founded
- 2013
- Pricing model
- Quote-based
- Starting price
- On request
- Deployment
- Cloud
- Platforms
- Web
- Best for
- Mid-market, Enterprise
- Made in India
- Yes
More software like Kratikal
Alternatives, the same vendor's other products and India-first picks.
View
Zoho Corporation · Cybersecurity & endpoint protection
4.8App Advisor rating
Made in IndiaFree plan
Starts at
Free · paid from $795/yr for 50 endpoints · Professional edition, about $1.32/endpoint/…
Made in IndiaFree plan
Starts at
Free · paid from ₹54/user/mo · Standard ₹54/user/month billed yearly, ₹60 monthly
RecommendedMade in India
Starts at
From ₹816/yr for 1 PC
Made in IndiaBest value
Starts at
From ₹795/year · Total Security, 1 user, 1 year
Made in India
Starts at
Rs. 1,920 (home Total Security offer price) · Business editions priced on request
Kratikal — frequently asked questions
How much does Kratikal VAPT or AutoSecT cost in India?+
Kratikal does not publish prices for its VAPT services or the AutoSecT platform. Pricing is quoted after scoping, based on how many web apps, mobile apps, APIs, cloud accounts and network assets you need tested, and whether you want a one-time audit or continuous scanning. Ask for the quote in INR with GST shown separately, and compare it against at least one other CERT-In empanelled auditor.
Is Kratikal CERT-In empanelled?+
Yes. Kratikal states on its about page that it was empanelled as a CERT-In organisation in 2021. This matters because many Indian regulators and large clients, including those following RBI and SEBI guidelines, expect security audits from a CERT-In empanelled auditor. Always check the current CERT-In empanelment list yourself before signing, since empanelment is renewed periodically.
Does Kratikal AutoSecT have a free trial?+
Yes. Kratikal AutoSecT offers a 15-day free trial, and its FAQ says no credit card is needed. Kratikal positions the trial for startups and SMEs, while enterprises get full vulnerability management, multi-asset scanning and compliance mapping on a paid plan. There is no permanent free plan. Use the trial on a staging app to judge how many real issues it finds versus noise.
What can Kratikal AutoSecT scan?+
Kratikal AutoSecT scans web applications from a single URL including authenticated areas, Android APK and iOS IPA files, REST APIs with static and dynamic analysis, AWS, GCP and Azure configurations, and internal or external networks. A Smart Scan Scheduler runs recurring scans and can trigger when new assets appear. Findings are risk-ranked and tracked by severity until they are fixed.
Does Kratikal help with ISO 27001, SOC 2 and DPDP compliance?+
Kratikal offers compliance audit support for ISO 27001, SOC 2, RBI, SEBI and India's DPDP Act, plus gap assessments that it says take weeks rather than months. AutoSecT reports can be mapped to ISO 27001, NIST CSF 2.0 and SOC 2 controls. This makes Kratikal useful for Indian SaaS and fintech firms that need both testing and audit evidence from one vendor.
Kratikal vs other VAPT firms: what is the difference?+
Kratikal combines CERT-In empanelled manual VAPT with its own AutoSecT scanning platform and the ThreatCop awareness product, so one vendor can handle audit reports, continuous scanning and phishing training. Many smaller VAPT firms offer only manual testing. Larger global scanners may have more features but are not CERT-In empanelled auditors. Compare report quality and retest terms, not just headline price.
Which tools does Kratikal AutoSecT integrate with?+
Kratikal AutoSecT sends findings to Jira, Slack, Microsoft Teams, Google Chat and Zoho Cliq, and supports SSO for central access. Cloud scanning connects to AWS, Google Cloud and Microsoft Azure. A vendor management hub lets you bring outside vendors into the fix lifecycle. Reports export as PDF or Excel, with optional password protection and co-branding for clients.
Where is Kratikal based?+
Kratikal is headquartered in Noida, Uttar Pradesh, with offices in Pune, Mumbai and Bangalore. It started in 2013 at MNNIT Allahabad and expanded to the UAE and Saudi Arabia in 2024 and the USA in 2025. In 2026 it listed on the BSE, and the company is now called Kratikal Tech Limited, formerly Kratikal Tech Pvt Ltd.
How long does a Kratikal security assessment take?+
Kratikal does not publish a fixed timeline, because duration depends on scope. Its site says gap assessments take weeks, and its 30-minute demo includes a live test against your own systems. AutoSecT scans can start as soon as you add a URL, app file or cloud account during the 15-day trial. For a formal VAPT report, agree the testing window and retest dates in the contract.
Is Kratikal itself certified for security?+
Kratikal's about page states it became GDPR compliant in 2022 and SOC 2 compliant in 2023, and it is CERT-In empanelled since 2021. Its site lists ISO 27001 as an audit service it provides, but does not state that Kratikal holds its own ISO 27001 certificate. If that matters for your vendor assessment, ask Kratikal for its SOC 2 report and certificates directly.
What is Kratikal?+
Kratikal is cybersecurity & endpoint protection by Kratikal, an Indian company from Noida. Security testing and awareness.
How much does Kratikal cost?+
Kratikal is priced on request. Request a demo through App Advisor and we will ask the vendor for a written quote.
Does Kratikal offer a free trial or free plan?+
Kratikal does not advertise a free plan; ask the vendor for a trial or a guided demo.
Is Kratikal made in India?+
Yes. Kratikal is built by Kratikal, headquartered in Noida, Uttar Pradesh.
Who is Kratikal best suited for?+
Kratikal suits mid-market, enterprise buyers looking for cybersecurity & endpoint protection.
What are the best alternatives to Kratikal?+
Popular alternatives in cybersecurity & endpoint protection include ManageEngine ADManager Plus, ManageEngine Endpoint Central, Zoho Vault. Use App Advisor's compare tool to see them side by side.
How is Kratikal deployed?+
Kratikal is available as a cloud (SaaS) product, with web access.
About Kratikal
Kratikal · Noida, Uttar Pradesh · Founded 2013 · 1 product in our catalogue · Indian company
Schedule a demo