VAPT Services in Pune

Yes — directly. OT / ICS testing at Pune manufacturing plants (Chakan, Talegaon, Pimpri-Chinchwad, Ranjangaon MIDC) is scoped under explicit safety-preserving rules of engagement. Production PLCs and safety-instrumented systems are never directly tested — we run network-passive enumeration on production, segmentation verification across the IT-OT bridge, and active testing only against staging or read-only mirror environments. The Purdue model zone-and-conduit map is the contract; nothing crosses a conduit without written authorisation and a rollback plan. Reports are aligned to IEC 62443 SL1-SL4 with explicit asset-owner / system-integrator role mapping. Reference: https://www.isa.org.

Yes — directly. ISO/SAE 21434 cybersecurity engineering and UN R155 Cyber Security Management System type-approval testing for connected-vehicle telematics, OTA platforms, in-vehicle gateways and back-end PKI. Pune-headquartered OEMs (Tata Motors, Bajaj Auto, Mahindra) and the EV cohort selling type-approved vehicles into UNECE markets must demonstrate a working CSMS with documented cybersecurity activities across the vehicle lifecycle. AxVeil delivers ATO-supporting penetration testing and cybersecurity-case evidence directly under MSA. Reference: https://www.iso.org/standard/70918.html.

TISAX (Trusted Information Security Assessment Exchange) is the German VDA-anchored automotive supply-chain assessment that European OEMs — VW, BMW, Daimler / Mercedes-Benz, Stellantis — cascade to Indian tier-1 and tier-2 suppliers. Assessment levels are AL1 (self-assessment), AL2 (plausibility check) and AL3 (on-site audit). AxVeil scopes TISAX readiness directly — VDA-ISA control walk-through, evidence pack, gap remediation and audit prep — for Pune automotive-software and component-engineering buyers. The formal AL2 / AL3 assessment is performed by an ENX-approved audit provider; AxVeil delivers the readiness layer beneath it.

No. AxVeil LLP is a young Indian entity and is not currently on the CERT-In Information Security Auditor empanelment list. For CERT-In mandated audits we partner with empaneled firms — see /partners. For Pune auto OEM OT / ICS testing, automotive software (ISO 21434 / TISAX), connected-vehicle telematics, Hinjewadi SaaS, DPDP Act 2023 work and SOC 2 / ISO 27001 driver engagements, AxVeil contracts directly. For Maharashtra State / PSU procurement and any tender naming a CERT-In empanelled auditor, AxVeil delivers under sub-contract to an empanelled partner who holds the buyer paper and signs the regulator submission. Reference: https://www.cert-in.org.in.

Remote-first for IT-side scopes — testing, daily digests and the readout call run over Teams / Zoom in IST hours. OT / ICS plant scopes require onsite kick-off at the plant gate — Chakan, Talegaon, Pimpri-Chinchwad, Ranjangaon MIDC — under the plant's visitor-management and safety-induction policy. Connected-vehicle in-vehicle gateway testing is scoped against staging vehicles either at the OEM's Pune engineering facility or shipped to a controlled lab. Hinjewadi / Magarpatta / Kharadi SaaS scopes are served remote-first with onsite kick-off on request.