VAPT (Vulnerability Assessment and Penetration Testing) is conducted periodically by a CERT-IN empanelled external security vendor. VAPT findings are analyzed, prioritized, and remediated in line with Xoxoday’s Threat and Vulnerability Management procedure. VAPT certificates are available for review.
Does Empuls Conduct Penetration Testing and Security Assessments?
Empuls runs annual third-party penetration tests. The Feb 2024 VAPT closed all 27 high-severity findings with an all-clear certificate issued.
Empuls' Security Operations and Incident Response
Empuls runs SAST/DAST application testing, endpoint detection and response monitoring, and defined incident SLAs under an ISO/IEC 27001:2022 certified ISMS.