Kerala Security Audit and Assurance Center (KSAAC)

What Kerala Security Audit and Assurance Center (KSAAC) does

Kerala Security Audit and Assurance Centre (KSAAC) is a Government of Kerala–established cybersecurity center operating as a division under Kerala University of Digital Sciences, Innovation and Technology (Digital University Kerala, formerly IIITM-K). Founded in 2022 and headquartered at Technopark Phase 4, Mangalapuram, Thiruvananthapuram, KSAAC provides professional security auditing services — including web application security auditing (WASA), mobile application security auditing (MASA), IT infrastructure auditing (ITIA), ISO 27001:2022 internal audits, V-CISO/V-DPO services, digital forensic analysis, secure code review, and accessibility compliance auditing — to government departments, industries, and educational institutions, primarily within Kerala. Its methodology is anchored in OWASP guidelines and conventional VAPT (vulnerability assessment and penetration testing), static/dynamic analysis, and source-code review, with no proprietary AI/ML components disclosed.

KSAAC also runs a parallel training and certification business, offering nine programs ranging from a one-year Post Graduate Diploma in Cyber Security (PGDCS) at 150,000 INR to short-term courses such as Cyber Hygiene Practices at 5,000 INR per participant, with institutional batch pricing and dual certification pathways through EC-Council, CompTIA, and INE. Revenue derives from professional services engagements, course fees, and CSR-funded outreach to government polytechnic colleges and schools, while the underlying cost base is supported by the parent university and Government of Kerala rather than external investors. The operating model is best characterized as a public-sector cybersecurity services and capacity-building unit with a Kerala-centric footprint, an 8-person core team of DUK faculty and dedicated security staff, and a go-to-market built on government mandate, CSR programs, and direct enterprise outreach rather than commercial sales infrastructure.

Name

Kerala Security Audit and Assurance Center (KSAAC)

Legal name

Kerala Security Audit and Assurance Centre

Website

https://ksaac.duk.ac.in

Company type

Private

Operating status

Operating

Headcount range

1–10 employees

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Systems Design and Related Services (5415), Computer Training (61142), Testing Laboratories and Services (54138)

SIC

Services-Engineering, Accounting, Research, Management (8700), Services-Educational Services (8200), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH)

akta.pro secondary industries

Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG), Security Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX) (BPAKADAC), Cybersecurity (General) (EDAOAIAB), Governance, Risk & Compliance (GRC) & Security Management (EDAOAIAG), Security Awareness, Training & Compliance Attestation (HDADAIAJ)

Keywords

• Cybersecurity auditing services
• Penetration testing
• Digital forensics
• Vulnerability assessment
• Cybersecurity training programs

Headquarters

HQ city

Thiruvananthapuram

HQ country

India

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Security Auditing Services: Professional security auditing services including WASA, MASA, ITIA, secure code review, digital forensics, ISO 27001 audits, V-CISO/V-DPO services, and accessibility compliance auditing provided to government departments, organizations, and industries on a project/consultation basis.
2. Cybersecurity Training Programs: Short-term and certification training programs in cybersecurity offered to individuals and institutions. Programs range from one-week courses to one-year postgraduate diplomas with associated certification fees.
3. Certification Services: Certification from Digital University Kerala provided upon completion of training programs, with preparation for international certifications from EC-Council, CompTIA, and INE.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels5 records

Core offering

KSAAC provides professional cybersecurity auditing services including web application security auditing, mobile application security auditing, IT infrastructure auditing, secure code review, digital forensics, ISO 27001:2022 internal audits, V-CISO/V-DPO services, and accessibility compliance auditing, delivered to government departments, organizations, industries, and educational institutions following OWASP guidelines. Complementing the auditing portfolio, KSAAC runs cybersecurity training and certification programs ranging from a one-year Post Graduate Diploma in Cyber Security to short-duration courses, with dual certifications from Digital University Kerala and preparation for international certifications from EC-Council, CompTIA, and INE.

Product overview

KSAAC is a government-established security auditing and training center under Digital University Kerala offering a portfolio of cybersecurity services and educational programs. The core offerings include eight distinct security auditing services: Web Application Security Auditing (WASA), Mobile Application Security Auditing (MASA), Information Technology Infrastructure Auditing (ITIA), ISO 27001:2022 Internal Audit, V-CISO/V-DPO Services, Digital Forensic & Analysis (DFA), Secure Code Review (SCR), and Accessibility Compliance Auditing (ACA). Complementing these services are nine training and certification programs ranging from a one-year Post Graduate Diploma in Cyber Security (PGDCS) to short-term courses like Cyber Hygiene Practices (CHP), Faculty Development Program (FDP), and Governance, Risk and Compliance (GRC). The services are offered as distinct professional consulting engagements, while the courses provide both full-time diploma programs and part-time training options.

Differentiator

Problem solved

Functional benefit

Products and services

• Web Application Security Auditing (WASA) Security testing process that reviews codebase to identify vulnerabilities in web applications through information gathering, port scanning, vulnerability analysis, penetration testing, and risk assessment following OWASP guidelines, intended for organizations seeking web application security assurance.
• Mobile Application Security Auditing (MASA) Mobile application mapping and reverse engineering to identify technical vulnerabilities through APK analysis, static analysis, dynamic analysis, API security auditing, and storage analysis following OWASP mobile guidelines, intended for organizations with mobile applications.
• Information Technology Infrastructure Auditing (ITIA) Technical evaluation assessing the current status of IT systems, applications, and networks including wireless device VAPT, networking device VAPT, network infrastructure security auditing, and internal risk assessment with reporting and mitigation, intended for organizations operating IT infrastructure.
• ISO 27001:2022 Internal Audit Assessment and enhancement of information security management systems to ensure compliance with ISO 27001:2022 framework, including security policy review, risk management process review, gap assessment, remediation guidance, and ISO 27001:2022 assessment handholding, intended for organizations pursuing ISO 27001 compliance.
• V-CISO / V-DPO Service Virtual Chief Information Security Officer and Virtual Data Protection Officer services providing information security leadership, risk management, compliance oversight, and data protection guidance on a part-time or project basis, intended for organizations lacking dedicated security or data protection executives.
• Digital Forensic & Analysis (DFA) Preservation, identification, extraction, and documentation of digital evidence including mobile forensics, disk forensics, memory forensics, network forensics, and log analysis for court of law documentation, intended for law enforcement agencies and organizations requiring forensic investigation support.
• Secure Code Review (SCR) Source code security analysis combining automated code security scanning with thorough manual review to detect security flaws in application design and implementation, including application environment understanding, false positive removal, and detailed reporting, intended for development teams building secure software.
• Accessibility Compliance Auditing (ACA) Professional evaluation of website and digital properties for compliance with Web Content Accessibility Guidelines (WCAG) standards and Americans with Disabilities Act (ADA) requirements, testing across assistive technologies, browsers, and devices, intended for organizations needing accessibility compliance.
• Post Graduate Diploma in Cyber Security (PGDCS) One-year full-time lab-oriented program providing hands-on training in cyber security domains with dual certifications, internships, and 100% placement assurance, intended for graduates pursuing careers in cybersecurity. Priced at INR 1,50,000.
• Advanced Diploma in Cyber Security (ADCS) Six-month full-time lab-oriented program with one-month internship providing practical training in essential cyber security domains and preparation for industry certifications, intended for graduates entering the cybersecurity workforce. Priced at INR 60,000.
• Certified Infrastructure Security Analyst (CISA) Three-month lab-oriented course focused on analyzing IT infrastructure and network security for entry-level roles in SOC analysis, intended for individuals seeking entry-level cybersecurity operations roles.
• Certified Network Defense (CND) Three-month skill-based lab-oriented course preparing participants for entry-level network administration and cyber security roles with CCNA and CCNP certification preparation, intended for individuals entering network defense and cybersecurity roles. Priced at INR 30,000.
• Advanced Certification in Ethical Hacking (ACEH) Two-month intensive lab-oriented course equipping graduates with skills to defend IT infrastructure and networks against cyber threats with placement assistance, intended for individuals seeking offensive and defensive security skills. Priced at INR 20,000.
• Certified Cyber Security Associate (CCSA) One-month lab-oriented course providing foundational skills and knowledge for entry into the cyber security field with certification from Digital University Kerala, intended for individuals seeking entry-level cybersecurity roles. Priced at INR 15,000.
• Governance, Risk and Compliance (GRC) Batch training program providing deep understanding of governance frameworks, IT risk assessment, threat analysis, compliance, and audit processes for organizational integrity and regulatory compliance, intended for batches of up to 15 participants from the same organization. Priced at INR 50,000 per batch.
• Faculty Development Program (FDP) Two-week full-time training program designed to enhance knowledge and skills of faculty members in cybersecurity, covering Kali Linux, ethical hacking, penetration testing, and digital forensics, intended for college and school faculty. Priced at INR 10,000 per participant or INR 70,000 per batch of 10.
• Cyber Hygiene Practices (CHP) One-week full-time cybersecurity awareness course covering computer systems, operating systems, networking, password management, threats and vulnerabilities, malware, and ethical hacking fundamentals, intended for participants seeking foundational cybersecurity hygiene awareness. Priced at INR 5,000 per participant.

Named customers6 records

Segments5 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature8 records

Partnerships

Five partnerships are on record, tiered core and minor.

• Digital University Kerala (DUK)coreStrategic or Co-development PartnerKSAAC is established at Digital University Kerala campus. DUK serves as the parent institution providing academic infrastructure, faculty resources, and institutional framework for KSAAC's cybersecurity auditing, training, and certification services.
• Government of KeralacoreStrategic or Co-development PartnerKSAAC was established by Government of Kerala for securing cyberspace and providing security auditing, consulting, training and certification services to various organisations, departments and industries.
• ISEA (Information Security Education and Awareness)minorStrategic or Co-development PartnerGovernment of India initiative for information security education. KSAAC is associated with ISEA for cybersecurity awareness and education activities.
• GKS InfotechminorStrategic or Co-development PartnerTechnology partner referenced in KSAAC's logo display, indicating a collaborative relationship for technology solutions or services.
• Government Polytechnic Colleges (Kerala)coreStrategic or Co-development PartnerKSAAC conducts cybersecurity awareness programs and training under CSR activities with multiple government polytechnic colleges including Neyyattinkara, Kaimanam, Pala, Attingal, and Government Women's Polytechnic College, serving differently abled and general students.

Scale indicators6 records

Recent moves7 records

Expansion highlights5 records

Direct peers

• SecureLayer7: Pune-based application security company offering penetration testing, red teaming, secure code review, and compliance services. Closely aligned with KSAAC's SCR, WASA and ISO 27001 capabilities.
• Astra Security: India-headquartered cybersecurity company focused on VAPT, web/mobile application security testing, and compliance audits for SMEs and enterprises. Directly comparable to KSAAC's WASA/MASA/ITIA core services.
• Cyber Security Works (CSW): Indian cybersecurity firm specializing in vulnerability assessment, penetration testing, and security auditing services. Comparable in service offering scope and target verticals to KSAAC.
• Pristine InfoSolutions: Indian cybersecurity consultancy offering VAPT, secure code review, ISO 27001 consultancy, and digital forensic services. Closely comparable in service breadth and Indian mid-market positioning.
• eSec Forte Technologies: Indian cybersecurity services firm offering penetration testing, vulnerability assessment, ISO 27001 audits, and security consulting. Most comparable in scale and service mix to KSAAC's ITIA/WASA/MASA and ISO 27001 audit offerings.

Broad incumbents

• Trustwave: Global cybersecurity services provider offering managed security, VAPT, and compliance services. Comparable in service mix (VAPT, ISO consulting, digital forensics) but operates globally at significantly larger scale.
• Quick Heal Technologies: Established Indian cybersecurity company with broader portfolio including endpoint security products and enterprise security services. Comparable on domestic-India cybersecurity services presence, though larger and product-led.
• Kroll (Cyber Risk): Global cyber risk advisory firm offering digital forensics, incident response, and security consulting. Directly comparable in digital forensics and advisory services, though materially larger and globally distributed.
• Deloitte (India Cyber Risk): Big Four advisory practice offering comprehensive cybersecurity consulting, GRC, and digital forensics in India. Comparable to KSAAC's ISO 27001 and V-CISO offerings but at vastly larger enterprise scale.

Others

• EC-Council (training & certification arm): Global cybersecurity certification body that KSAAC prepares students for. Acts as a referral pipeline and training curriculum partner, with overlapping training market footprint in ethical hacking and network defense.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/kerala-security-audit-and-assurance-center-ksaac

Revenue estimate

Valuation estimate

Number of profiles

Profiles15 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Kerala Security Audit and Assurance Center (KSAAC)