Practice · 2 min read
What Indian startups should actually budget for security
Security spend fails when it arrives in the wrong order. Here is what buys the most risk reduction at each funding stage, with indicative rupee figures.
Practice
Security Practice & Budget Articles
What this covers
These posts cover how to buy and run security work: what to spend at each funding stage, choosing between a penetration test and a code review when the budget only covers one, and running a threat-modelling session that produces tickets instead of diagrams nobody opens.
Security spend fails when it arrives in the wrong order — tooling before design review, certification before a customer asks. These posts are about sequencing the work so each rupee removes the most risk.
3 posts in Practice.
Practice · 4 min read
Threat modelling a payments flow in ninety minutes
Threat modelling gets skipped because it sounds like a two-day workshop. Here is the ninety-minute version, run on the flow that carries your money.
Practice · 3 min read
Pentest or code review, when you can only afford one
They answer different questions. Which one to buy depends on whether you need to know what an attacker can do today, or why it was possible in the first place.
Want this tested properly?
Scope and a fixed quote within two working days. First consultation is free.