Security Center

During commercial penetration testing and adversary simulation engagements: • Data Segregation: Client assessment data, scan configurations, and proof-of-concept scripts are stored in access-restricted repositories segregated from public web infrastructure. • Transmission Security: Assessment deliverables, technical dossiers, and remediation blueprints are transmitted exclusively over encrypted channels (HTTPS/TLS) or encrypted containers. • Evidence Retention & Purging: Assessment evidence and working notes are retained only for the contracted re-testing window as defined in the client's Statement of Work, after which operational working copies are decommissioned.

Our corporate and production environments enforce defense-in-depth access principles: • Role-based access control (RBAC) ensuring operators only access systems and repositories necessary for active engagement duties. • Multi-factor authentication (MFA) required across all administrative accounts, source code repositories, and cloud management consoles. • Enforced HTTPS (TLS 1.2/1.3), Content Security Policy (CSP), and DDoS mitigation across public web endpoints. • Branch protection rules, automated dependency screening, and peer reviews integrated into our software engineering lifecycle.

Parasym Syndicate conducts assessments aligned with recognized security frameworks including OWASP Top 10, NIST AI RMF, and Indian regulatory guidelines (such as RBI, SEBI, and CERT-In compliance frameworks). While our senior operators maintain respected industry offensive credentials, Parasym Syndicate's corporate operations do not claim independent third-party SOC 2 or ISO 27001 corporate certifications unless explicitly attested in formal procurement documentation.

For inquiries regarding our technical safeguards, operational practices, or vendor security questionnaires, please contact our security team at security@parasym.in or info@parasym.in.