One scan, anywhere in India
- No location limit. The scan is performed against a public domain. Your office address does not change what it can see.
- India-first by design. Pricing is in rupees with GST invoices, results include a Hindi executive summary and the readiness view follows the DPDP Act 2023.
- Nothing to install. No agents, no credentials and no access to your systems.
- Fast and free to start. A first CyberScore takes about 45 seconds and needs no card.
Start with a free scan or read how a cyber risk score works.
Every state and union territory
RiskPulse serves all 36 states and union territories. The table lists them by region together with the main business hubs where Indian SMEs concentrate.
| Region | States and union territories | Business hubs |
|---|---|---|
| North India | Delhi, Haryana, Punjab, Himachal Pradesh, Uttarakhand, Uttar Pradesh, Jammu and Kashmir, Ladakh, Chandigarh | Delhi NCR (Gurugram, Noida), Chandigarh tricity, Lucknow, Kanpur, Ludhiana, Dehradun |
| West India | Maharashtra, Gujarat, Goa, Rajasthan, Dadra and Nagar Haveli and Daman and Diu | Mumbai, Pune, Nagpur, Ahmedabad, Surat, Vadodara, Jaipur, Panaji |
| South India | Karnataka, Tamil Nadu, Telangana, Andhra Pradesh, Kerala, Puducherry, Lakshadweep | Bengaluru, Chennai, Hyderabad, Kochi, Coimbatore, Visakhapatnam, Thiruvananthapuram |
| East India | West Bengal, Odisha, Bihar, Jharkhand, Andaman and Nicobar Islands | Kolkata, Bhubaneswar, Patna, Ranchi, Jamshedpur |
| Central India | Madhya Pradesh, Chhattisgarh | Indore, Bhopal, Raipur |
| North-East India | Assam, Arunachal Pradesh, Manipur, Meghalaya, Mizoram, Nagaland, Sikkim, Tripura | Guwahati, Shillong, Imphal, Agartala, Gangtok |
Who uses it across India
| Sector | What usually matters most | Where a scan helps |
|---|---|---|
| E-commerce and D2C brands | Checkout trust, spoofed order emails, customer data | TLS, email authentication, breach exposure |
| IT services and SaaS | Customer due-diligence questionnaires | A shareable, dated score and fix plan |
| Healthcare clinics and diagnostics | Sensitive personal data, appointment systems | Exposed services, DPDP notice and grievance contact |
| Manufacturing and exporters | Invoice fraud, supplier impersonation | SPF, DKIM and DMARC enforcement |
| Education and coaching | Student and parent data, children’s-data rules | Privacy notice, consent signals, patching |
| Fintech, NBFC and lending | Regulator and partner security expectations | Continuous monitoring and alerts |
| Professional services (CA, legal, consulting) | Client confidentiality, business email compromise | Email authentication, credential exposure |
| Insurers, brokers and underwriters | Consistent SME risk triage | The read-only Insurer API |
Questions about coverage across India
Can businesses in any Indian state use RiskPulse?
Yes. RiskPulse is an online service that scans a public domain from the internet, so it works the same for a business in any of India’s 28 states and 8 union territories, in metros and in smaller towns.
Do I need to be in a specific city or have an Indian company registration?
No. The scan needs only a public domain name such as .in, .co.in or .com. It does not depend on where your office is. The DPDP readiness view is relevant to any business that processes personal data of people in India.
Does the DPDP Act apply the same way in every state?
Yes. The Digital Personal Data Protection Act 2023 is a central law, so the same obligations apply to a Data Fiduciary wherever in India it operates. State-level sector rules may add requirements on top, so check them for regulated industries.
Is there a Hindi version of the report?
Every report includes a plain-English fix plan and a Hindi executive summary so that the whole team, not just the technical lead, can read the result.
Where does my scan run, and what does it touch?
Scans run on infrastructure in India and read only publicly visible information about your domain. Nothing is installed, no credentials are requested and no authenticated traffic is sent to your systems.