Kratikal

What Kratikal does

Kratikal Tech Limited is a Noida-headquartered, CERT-In empanelled cybersecurity firm operating across two product lines and multiple service lines. The company's proprietary product portfolio centers on AutoSecT, an AI-driven pentest and Vulnerability Management, Detection, and Response (VMDR) platform that automates scanning across web, mobile, cloud, API, and network assets using agentic AI and a RAG-powered reasoning engine to filter false positives and generate tailored remediation guidance. The complementary Threatcop platform addresses the human layer through AI-powered phishing simulation, security awareness training, and deepfake detection, and is Texas DIR-certified for AI awareness training.

The company's services business is a significant revenue contributor and spans Vulnerability Assessment and Penetration Testing (VAPT), Governance/Risk/Compliance (GRC) consulting, virtual CISO (vCISO) engagements, managed Vulnerability Disclosure Programs, and audits across ISO 27001, SOC 2, GDPR, PCI DSS, HIPAA, and Indian regulatory frameworks (RBI, SEBI, IRDAI, CERT-In). Kratikal serves 650+ clients across fintech, telecom, healthcare, e-commerce, manufacturing, and SaaS, with marquee logos including L&T, Airtel, Flipkart, Paytm, Tata, HCL Healthcare, BDO, Indorama, and Cars24. The company distributes through enterprise field sales, product-led growth via AutoSecT's 15-day free trial, a dedicated Kratikal for Startups program, and an event-driven content engine (podcasts, webinars, CISO conclaves).

The business operates from India (Noida HQ plus Mumbai, Pune, and Bengaluru co-working offices) and a US office in Cupertino supporting Threatcop AI Inc, with a UAE subsidiary Threatcop FZ LLC. The 200-person team holds industry certifications including CISA, ISO 27001 LA, OSCP, CEH, CREST, and CISM. Following a ₹39.7 crore BSE SME IPO completed in June 2026, Kratikal is now a publicly listed entity on the SME platform, with FY26 revenue of ₹36.72 crore (76.1% YoY growth) and FY26 PAT of ₹6.14 crore.

Name

Kratikal

Legal name

Kratikal Tech Limited

Website

https://kratikal.com

Company type

Public

Founded year

2015

Operating status

Ipo

Headcount range

101–250 employees

Short description

Kratikal is a Noida-based, CERT-In empanelled cybersecurity company offering an AI-driven pentest and VMDR platform (AutoSecT), phishing simulation (Threatcop), and VAPT, GRC, and vCISO services to 650+ enterprise clients across India, with expanding operations in the US and UAE.

Ownership category

akta.pro rank

Product category

Cybersecurity

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM)

akta.pro secondary industries

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), Insider Threat Program Design & Risk Assessments (BPAKADAM)

Keywords

• Penetration testing services
• Vulnerability management platform
• Cybersecurity compliance audits
• Security awareness training
• Managed vulnerability disclosure

Headquarters

HQ city

Noida

HQ country

India

HQ region

Asia

Offices5 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure, Others

Revenue model

1. SaaS Platform Subscription (AutoSecT): AI-driven pentesting and VMDR platform sold as subscription, with 15-day free trial and tiered pricing. Revenue recognized over subscription period.
2. VAPT and Penetration Testing Services: One-time and project-based vulnerability assessment and penetration testing services across web, mobile, cloud, network, and API assets. Includes certification upon completion.
3. vCISO and GRC Consulting Services: Virtual CISO and Governance, Risk, and Compliance consulting engagements providing security leadership, strategy, and audit readiness. Delivered as ongoing retainers or project-based engagements.
4. Compliance Audit Services: Security compliance audits including ISO 27001, SOC 2, GDPR, PCI DSS, HIPAA, and regulatory audits for RBI, SEBI, IRDAI, and CERT-In. Delivered as consulting engagements.
5. Managed Vulnerability Disclosure Program (VDP): Managed VDP services combining human expertise with AI-driven validation to manage bug bounty and vulnerability disclosure programs for enterprise clients.

Pricing tiers

Go-to-market motion4 records

Distribution channels4 records

Marketing channels7 records

Core offering

Kratikal is an AI-driven cybersecurity company that provides a unified Pentest and VMDR platform (AutoSecT) for automated vulnerability scanning across web, mobile, cloud, API, and network assets, combined with managed services including VAPT, security compliance audits (ISO 27001, SOC 2, GDPR, PCI DSS, HIPAA, RBI, SEBI, IRDAI, CERT-In), vCISO consulting, and managed vulnerability disclosure programs. The company also offers Threatcop, a security awareness and phishing simulation platform, and serves 650+ enterprise and SME clients across fintech, telecom, healthcare, e-commerce, and SaaS as a CERT-In Empanelled Security Auditor.

Product overview

Kratikal is an AI-driven cybersecurity company offering a unified platform approach combining proprietary products with managed services. The core product portfolio consists of AutoSecT (AI-powered pentesting and VMDR platform) and Threatcop (human-centered security awareness platform), complemented by service offerings including VAPT testing, GRC consulting, vCISO services, Managed VDP, and Compliance services. The company operates as a CERT-In empanelled security auditor serving 650+ enterprise clients across India and expanding globally through UAE and USA subsidiaries.

Differentiator

Problem solved

Functional benefit

Brands

• AutoSecT: AI-driven Pentest and VMDR (Vulnerability Management, Detection, and Response) platform that automates vulnerability scanning across web, mobile, cloud, API, and network assets.
• Threatcop

Products and services

• AutoSecT AI-driven Pentest and Vulnerability Management, Detection, and Response (VMDR) platform that automates vulnerability scanning across web applications, mobile apps, cloud infrastructure, APIs, and networks from a single unified interface with near-zero false positives; sold on subscription with a 15-day free trial.
• Threatcop AI-driven cybersecurity platform focused on human-centered security solutions including security awareness training, phishing simulation, deepfake detection, and social engineering defense; certified by Texas Department of Information Resources for AI awareness training.
• VAPT Services Comprehensive Vulnerability Assessment and Penetration Testing services covering Web Application, Mobile Application, Network, Cloud, IoT, OT, and Medical Device security testing.
• GRC Services Governance, Risk, and Compliance services helping organizations align objectives, manage uncertainty, and meet regulatory obligations through structured governance frameworks, risk management, and compliance mapping.
• vCISO Services Virtual Chief Information Security Officer services providing hands-on security leadership, strategic planning, incident readiness, and execution oversight for organizations without a dedicated CISO.
• Managed VDP Managed Vulnerability Disclosure Program service that validates, reproduces, and risk-scores vulnerability reports using AutoSecT before reaching internal teams, providing only verified vulnerabilities with business and technical impact analysis.
• Compliance Services Security compliance audit services covering Standard Compliance (ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS) and Regulatory Compliance (RBI, SEBI, IRDAI, CERT-In) for various industry requirements.
• Kratikal for Startups Specialized cybersecurity compliance program for early-stage tech startups providing affordable access to enterprise-level security audits, expert advisory, and compliance certification assistance for startups with 10+ employees, funding below $1M USD, and ARR below $0.5M USD.

Quantifiable outcome

• Identifies over 1.2 million vulnerabilities annually across 25,000+ secured network assets
• +3 more outcomes

Named customers15 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability6 records

Feature6 records

Scale indicators10 records

Recent moves9 records

Expansion highlights6 records

Broad incumbents

• Tenable: Global vulnerability management leader (Nessus) with cloud and on-prem VMDR platform. Competes with AutoSecT in continuous vulnerability scanning and risk prioritization for enterprise customers.
• Qualys: Global cloud-based VMDR and compliance platform with broad enterprise footprint. Direct competitor to AutoSecT at the platform layer, with overlapping capabilities in vulnerability management and compliance reporting.
• CrowdStrike: Global cybersecurity leader with Falcon platform spanning endpoint, cloud, identity, and vulnerability management. Increasingly competes in VMDR via Falcon Spotlight, with significantly larger R&D and India presence.

Emerging players

• Safe Security: Indian-origin cybersecurity risk quantification platform (SAFE) used by enterprises and governments. Adjacent peer offering AI-driven security posture assessment overlapping with Kratikal's vulnerability management value proposition.
• CloudSEK: Indian-origin cybersecurity startup with AI-driven threat intelligence and digital risk monitoring. Emerging adjacent player targeting Indian enterprise and global customers with overlapping AI/security positioning.

Direct peers

• Astra Security: India-origin penetration testing and vulnerability management platform serving SaaS companies and enterprises. Overlaps with Kratikal's AutoSecT positioning and VAPT services for tech-forward customers.
• Indusface: Indian application security company offering VMDR (AppTrana), VAPT, and compliance services to enterprise customers. Closely comparable to Kratikal on product mix (managed VAPT + SaaS platform) and target market (Indian mid-market and enterprise).
• WeSecureApp: Indian application security and VAPT specialist serving BFSI and enterprise customers. Comparable service portfolio including web/mobile/API testing and compliance services.
• eSec Forte Technologies: Indian CERT-In empanelled information security consulting firm offering VAPT, compliance audits, and managed security services. Direct peer in Indian cybersecurity services market with similar CERT-In empanelled status.
• TAC Security: Indian vulnerability management and penetration testing firm with ESOF (product) and VAPT services. Direct peer in India for cybersecurity services and AI-driven vulnerability management.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/kratikal
• Facebookfacebook.com/kratikalpvl

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles7 records

Subsidiaries2 records

Funding overview

Funding rounds1 record

Investors6 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Kratikal