We opted for both manual VAPT and automated WAS Scan. CERT-In empaneled Indusface platform was quite accomodative to provide custom solution based on our use case. We had two applications reviewed and scanned by the Indusface platform: a frontend and a backend application. After providing complete KT to the Indusface Team, they quickly configured their systems to setup the scans. Manual Scan (VAPT): Indusface team thoroughly tested out all the APIs and provided their observations within 2 weeks. Team provided support in fixing the observations as well. Overall within 3-4 weeks, we were given the self-host certificate and VAPT report. Automated Scan: On Indusface platform, daily auto-scans run which tests for any vulnerabilities on our website and lets us know in real time if anything needs to be fixed.

The scanner helps in performing deep-dive security scans for our sites and provides us with comprehensive reports of vulnerabilities.

The Indusface WAS plugins are regularly updated for identifying new types and categories of vulnerabilities which makes the product really reliable for use. Easy follow-ups and quick replies helped in closing the VAPT very quickly