VendorPulse grades your internet-facing security against the 2026 deadlines — 47-day certificates, DPDP, SEBI CSCRF and quantum readiness — and maps every finding to the rules you report on.
Your console
Scan the domain tied to your verified email. Results are private to you and downloadable as a full compliance report.
What VendorPulse checks
Expiry, trust, weak keys, TLS 1.0–1.3 and post-quantum key exchange — the shrinking-certificate problem, solved before it causes an outage.
Every internet-facing system attributed to you, with exposed services and known vulnerabilities — powered by passive intelligence. Open →
Guided gap assessment against the DPDP Act and 2025 Rules, with a prioritised fix list. Start →
Self-assess cyber resilience against SEBI's CSCRF — evidence you can take to your auditor. Start →
Turn your posture into an indicative premium, so buyers and insurers start from evidence, not guesswork. Try it →
Leaked employee credentials tied to your domain, shown as counts and sources — never raw data. Open →
How ready you are for AI-accelerated vulnerability discovery: patch speed, inventory, and supplier commitments. Start →
How it works
VendorPulse never scans strangers. Access is tied to a verified official email, and you can only assess a domain you've proven you control.
Register with your official company email and confirm it in one click. Free and personal inboxes aren't accepted.
VendorPulse checks the domain tied to your email using passive, non-intrusive methods — no logins, no attacks, no disruption.
A clear A–F grade, every finding mapped to RBI, SEBI, DPDP and ISO, and a report you can take to your board or auditor.
Why VendorPulse
Global ratings tools speak NIST and charge in dollars. VendorPulse speaks the frameworks your regulator uses, keeps your data in India, and gives you an answer in minutes instead of weeks.
About us
We're a team of security professionals who believe India's banks, NBFCs, fintechs and the vendors who serve them deserve enterprise-grade protection — clearly explained, fairly priced, and in the language their regulators actually use.
Too much of today's security tooling is priced in dollars and designed for another market. We built VendorPulse to change that: assessment mapped to RBI, SEBI CSCRF and the DPDP Act, kept passive and non-intrusive, with your data hosted in India. Good security shouldn't be a privilege of the largest enterprises — our mission is to make it accessible to every organisation that keeps the country's finances running.
Built for Indian regulations and realities, not retrofitted from abroad.
Passive, non-intrusive checks, with your data kept in India.
Enterprise-grade assessment at a price that fits every team.
Founding members
Full access to the compliance reports and monitoring for 12 months, at no cost — the real price, genuinely waived while we grow with our earliest partners.