Kratikal
Kratikal is a Noida-based, CERT-In empanelled cybersecurity company offering an AI-driven pentest and VMDR platform (AutoSecT), phishing simulation (Threatcop), and VAPT, GRC, and vCISO services to 650+ enterprise clients across India, with expanding operations in the US and UAE.
- Company typePublic
- Founded2015
- HeadquartersNoida, India
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What Kratikal does
Kratikal Tech Limited is a Noida-headquartered, CERT-In empanelled cybersecurity firm operating across two product lines and multiple service lines. The company's proprietary product portfolio centers on AutoSecT, an AI-driven pentest and Vulnerability Management, Detection, and Response (VMDR) platform that automates scanning across web, mobile, cloud, API, and network assets using agentic AI and a RAG-powered reasoning engine to filter false positives and generate tailored remediation guidance. The complementary Threatcop platform addresses the human layer through AI-powered phishing simulation, security awareness training, and deepfake detection, and is Texas DIR-certified for AI awareness training.
The company's services business is a significant revenue contributor and spans Vulnerability Assessment and Penetration Testing (VAPT), Governance/Risk/Compliance (GRC) consulting, virtual CISO (vCISO) engagements, managed Vulnerability Disclosure Programs, and audits across ISO 27001, SOC 2, GDPR, PCI DSS, HIPAA, and Indian regulatory frameworks (RBI, SEBI, IRDAI, CERT-In). Kratikal serves 650+ clients across fintech, telecom, healthcare, e-commerce, manufacturing, and SaaS, with marquee logos including L&T, Airtel, Flipkart, Paytm, Tata, HCL Healthcare, BDO, Indorama, and Cars24. The company distributes through enterprise field sales, product-led growth via AutoSecT's 15-day free trial, a dedicated Kratikal for Startups program, and an event-driven content engine (podcasts, webinars, CISO conclaves).
The business operates from India (Noida HQ plus Mumbai, Pune, and Bengaluru co-working offices) and a US office in Cupertino supporting Threatcop AI Inc, with a UAE subsidiary Threatcop FZ LLC. The 200-person team holds industry certifications including CISA, ISO 27001 LA, OSCP, CEH, CREST, and CISM. Following a ₹39.7 crore BSE SME IPO completed in June 2026, Kratikal is now a publicly listed entity on the SME platform, with FY26 revenue of ₹36.72 crore (76.1% YoY growth) and FY26 PAT of ₹6.14 crore.
Kratikal firmographics
Firmographics- Name
- Kratikal
- Legal name
- Kratikal Tech Limited
- Website
- https://kratikal.com
- Company type
- Public
- Founded year
- 2015
- Operating status
- Ipo
- Headcount range
- 101–250 employees
- Short description
- Kratikal is a Noida-based, CERT-In empanelled cybersecurity company offering an AI-driven pentest and VMDR platform (AutoSecT), phishing simulation (Threatcop), and VAPT, GRC, and vCISO services to 650+ enterprise clients across India, with expanding operations in the US and UAE.
- Ownership category
- akta.pro rank
Kratikal industry classification
Industry- Product category
- Cybersecurity
- NAICS
- Computer Systems Design and Related Services (54151)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM)
- akta.pro secondary industries
- Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), Insider Threat Program Design & Risk Assessments (BPAKADAM)
Keywords
Where Kratikal is headquartered
LocationHeadquarters
- HQ city
- Noida
- HQ country
- India
- HQ region
- Asia
Offices5 records
Markets served
Kratikal business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure, Others
Revenue model
- SaaS Platform Subscription (AutoSecT): AI-driven pentesting and VMDR platform sold as subscription, with 15-day free trial and tiered pricing. Revenue recognized over subscription period.
- VAPT and Penetration Testing Services: One-time and project-based vulnerability assessment and penetration testing services across web, mobile, cloud, network, and API assets. Includes certification upon completion.
- vCISO and GRC Consulting Services: Virtual CISO and Governance, Risk, and Compliance consulting engagements providing security leadership, strategy, and audit readiness. Delivered as ongoing retainers or project-based engagements.
- Compliance Audit Services: Security compliance audits including ISO 27001, SOC 2, GDPR, PCI DSS, HIPAA, and regulatory audits for RBI, SEBI, IRDAI, and CERT-In. Delivered as consulting engagements.
- Managed Vulnerability Disclosure Program (VDP): Managed VDP services combining human expertise with AI-driven validation to manage bug bounty and vulnerability disclosure programs for enterprise clients.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Pay-as-you-go | AutoSecT 15-day free trial |
Go-to-market motion4 records
Distribution channels4 records
Marketing channels7 records
Kratikal product offering
Product offeringCore offering
Kratikal is an AI-driven cybersecurity company that provides a unified Pentest and VMDR platform (AutoSecT) for automated vulnerability scanning across web, mobile, cloud, API, and network assets, combined with managed services including VAPT, security compliance audits (ISO 27001, SOC 2, GDPR, PCI DSS, HIPAA, RBI, SEBI, IRDAI, CERT-In), vCISO consulting, and managed vulnerability disclosure programs. The company also offers Threatcop, a security awareness and phishing simulation platform, and serves 650+ enterprise and SME clients across fintech, telecom, healthcare, e-commerce, and SaaS as a CERT-In Empanelled Security Auditor.
Product overview
Kratikal is an AI-driven cybersecurity company offering a unified platform approach combining proprietary products with managed services. The core product portfolio consists of AutoSecT (AI-powered pentesting and VMDR platform) and Threatcop (human-centered security awareness platform), complemented by service offerings including VAPT testing, GRC consulting, vCISO services, Managed VDP, and Compliance services. The company operates as a CERT-In empanelled security auditor serving 650+ enterprise clients across India and expanding globally through UAE and USA subsidiaries.
Differentiator
Problem solved
Functional benefit
Brands
- AutoSecT: AI-driven Pentest and VMDR (Vulnerability Management, Detection, and Response) platform that automates vulnerability scanning across web, mobile, cloud, API, and network assets.
- Threatcop
Products and services
- AutoSecT AI-driven Pentest and Vulnerability Management, Detection, and Response (VMDR) platform that automates vulnerability scanning across web applications, mobile apps, cloud infrastructure, APIs, and networks from a single unified interface with near-zero false positives; sold on subscription with a 15-day free trial.
- Threatcop AI-driven cybersecurity platform focused on human-centered security solutions including security awareness training, phishing simulation, deepfake detection, and social engineering defense; certified by Texas Department of Information Resources for AI awareness training.
- VAPT Services Comprehensive Vulnerability Assessment and Penetration Testing services covering Web Application, Mobile Application, Network, Cloud, IoT, OT, and Medical Device security testing.
- GRC Services Governance, Risk, and Compliance services helping organizations align objectives, manage uncertainty, and meet regulatory obligations through structured governance frameworks, risk management, and compliance mapping.
- vCISO Services Virtual Chief Information Security Officer services providing hands-on security leadership, strategic planning, incident readiness, and execution oversight for organizations without a dedicated CISO.
- Managed VDP Managed Vulnerability Disclosure Program service that validates, reproduces, and risk-scores vulnerability reports using AutoSecT before reaching internal teams, providing only verified vulnerabilities with business and technical impact analysis.
- Compliance Services Security compliance audit services covering Standard Compliance (ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS) and Regulatory Compliance (RBI, SEBI, IRDAI, CERT-In) for various industry requirements.
- Kratikal for Startups Specialized cybersecurity compliance program for early-stage tech startups providing affordable access to enterprise-level security audits, expert advisory, and compliance certification assistance for startups with 10+ employees, funding below $1M USD, and ARR below $0.5M USD.
Quantifiable outcome
- Identifies over 1.2 million vulnerabilities annually across 25,000+ secured network assets
- +3 more outcomes
Companies that use Kratikal
Customer profileNamed customers15 records
Segments4 records
Ideal customer profiles4 records
Kratikal technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration4 records
AI capability6 records
Feature6 records
Kratikal partnerships and signals
Strategic signalScale indicators10 records
Recent moves9 records
Expansion highlights6 records
Kratikal competitors and assessment
Company assessmentBroad incumbents
- Tenable: Global vulnerability management leader (Nessus) with cloud and on-prem VMDR platform. Competes with AutoSecT in continuous vulnerability scanning and risk prioritization for enterprise customers.
- Qualys: Global cloud-based VMDR and compliance platform with broad enterprise footprint. Direct competitor to AutoSecT at the platform layer, with overlapping capabilities in vulnerability management and compliance reporting.
- CrowdStrike: Global cybersecurity leader with Falcon platform spanning endpoint, cloud, identity, and vulnerability management. Increasingly competes in VMDR via Falcon Spotlight, with significantly larger R&D and India presence.
Emerging players
- Safe Security: Indian-origin cybersecurity risk quantification platform (SAFE) used by enterprises and governments. Adjacent peer offering AI-driven security posture assessment overlapping with Kratikal's vulnerability management value proposition.
- CloudSEK: Indian-origin cybersecurity startup with AI-driven threat intelligence and digital risk monitoring. Emerging adjacent player targeting Indian enterprise and global customers with overlapping AI/security positioning.
Direct peers
- Astra Security: India-origin penetration testing and vulnerability management platform serving SaaS companies and enterprises. Overlaps with Kratikal's AutoSecT positioning and VAPT services for tech-forward customers.
- Indusface: Indian application security company offering VMDR (AppTrana), VAPT, and compliance services to enterprise customers. Closely comparable to Kratikal on product mix (managed VAPT + SaaS platform) and target market (Indian mid-market and enterprise).
- WeSecureApp: Indian application security and VAPT specialist serving BFSI and enterprise customers. Comparable service portfolio including web/mobile/API testing and compliance services.
- eSec Forte Technologies: Indian CERT-In empanelled information security consulting firm offering VAPT, compliance audits, and managed security services. Direct peer in Indian cybersecurity services market with similar CERT-In empanelled status.
- TAC Security: Indian vulnerability management and penetration testing firm with ESOF (product) and VAPT services. Direct peer in India for cybersecurity services and AI-driven vulnerability management.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Kratikal social profiles
Digital presenceKratikal compliance and trust
Trust signalCompliance6 records
Kratikal financial estimates
Financial estimateRevenue estimate
Valuation estimate
Kratikal leadership team
Management profileNumber of profiles
Profiles7 records
Kratikal subsidiaries and ownership
Company hierarchySubsidiaries2 records
Kratikal funding detail
Funding detailFunding overview
Funding rounds1 record
Investors6 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Kratikal M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Kratikal
What does Kratikal do?
Kratikal is an AI-driven cybersecurity company that provides a unified Pentest and VMDR platform (AutoSecT) for automated vulnerability scanning across web, mobile, cloud, API, and network assets, combined with managed services including VAPT, security compliance audits (ISO 27001, SOC 2, GDPR, PCI DSS, HIPAA, RBI, SEBI, IRDAI, CERT-In), vCISO consulting, and managed vulnerability disclosure programs. The company also offers Threatcop, a security awareness and phishing simulation platform, and serves 650+ enterprise and SME clients across fintech, telecom, healthcare, e-commerce, and SaaS as a CERT-In Empanelled Security Auditor.
Is Kratikal a public or private company?
Kratikal is a public company. It is classified as public and is currently ipo.
When was Kratikal founded?
Kratikal was founded in 2015. It employs 101 to 250 people.
Where is Kratikal based?
Kratikal is headquartered in Noida, India, in the Asia region.
How does Kratikal make money?
Five revenue lines are on record. SaaS Platform Subscription (AutoSecT) is the primary driver. The others are VAPT and Penetration Testing Services, vCISO and GRC Consulting Services, compliance Audit Services and managed Vulnerability Disclosure Program (VDP).
Who are Kratikal's main competitors?
Broad incumbents on record are Tenable, Qualys and CrowdStrike. Emerging players are Safe Security and CloudSEK. Direct peers are Astra Security, Indusface, WeSecureApp, eSec Forte Technologies and TAC Security.
Does Kratikal have an API?
No public API is recorded for Kratikal.
What industry is Kratikal in?
Kratikal's product category is Cybersecurity. Its primary akta.pro industry code is BPAKAHAM, Data Security & Privacy Services (DLP, Encryption, Privacy Ops), with a secondary code of BPAEADAL, Data Security & Privacy Managed Services (DLP/Encryption). Its NAICS code is 54151 and its SIC code is 7370.