Assessment Verticals · Part of 34 Modules

Every Infrastructure Risk. One Platform.

Specialised AI assessments for IT infrastructure, IAM, CIS benchmarks, SOC 2 readiness, log retention, virtualisation, email, Active Directory, backup DR, network segmentation, DNS, SSL, and Indian regulatory compliance.

Start Free Assessment → Pricing

Free

First 2 assessments

<10min

Results

34

Security modules

10+

Compliance frameworks

Core Infrastructure

IT Infrastructure

Full health assessment of servers, storage, network, services, and configuration gaps.

LinuxWindows ServerCERT-In

Virtualisation & Containers

Proxmox, VMware ESXi, Hyper-V, KVM, Docker, Kubernetes — configuration, isolation, and security audit.

ProxmoxVMwareDockerK8s

Ransomware Readiness

Backup gaps, network segmentation, lateral movement exposure, and incident response readiness.

CERT-InNCIIPCAll Industries

Backup & DR Verification

Have you tested your backup restoration? RTO/RPO documented? Offsite copy verified? Most companies cannot answer yes to all three.

RPO/RTOOffsiteRestoration

Network & Identity

Active Directory / LDAP

Password policies, privileged account sprawl, Kerberoasting exposure, stale accounts, and GPO security.

ADLDAPKerberosGPO

Network Segmentation

VLAN isolation, firewall rules, DMZ, east-west lateral movement, and inter-zone access control.

VLANFirewallDMZSEBI CSCRF

DNSSEC, subdomain takeover, dangling CNAMEs, DNS hijacking exposure, and DNS-over-HTTPS readiness.

DNSSECSubdomainsCAA

SSL/TLS Deep Scan

Certificate chain, cipher suites, HSTS, forward secrecy, CAA records, and TLS version compliance.

TLS 1.3CiphersHSTS

Application & Messaging

SPF, DKIM, DMARC, open relay, mail gateway config, spoofing exposure, and phishing simulation readiness.

SPF/DKIMDMARCRelay

OWASP Top 10, SSL analysis, CMS vulnerabilities, WAF coverage, and injection risks.

OWASPWordPressPHP

Dependency CVEs, hardcoded secrets, insecure functions, and SAST tooling coverage.

JWT weaknesses, rate limiting gaps, CORS policy, auth methods, and endpoint exposure.

RESTJWTOAuthCORS

Regulatory & Database

SEBI Compliance

CSCRF framework for brokers and DPs. VAPT status, cyber insurance, and audit readiness.

SEBI CSCRFBrokersDPs

RBI IT framework, data localisation, PCI-DSS scope, IRDAI guidelines.

Database Health

Slow queries, replication lag, backup verification, Oracle AWR, and external exposure.

MySQLOracleMSSQL

ABDM compliance, HIS/HMIS security, DICOM exposure, patient data access controls.

User accounts, permissions, MFA coverage, dormant accounts, SSH keys, privileged access.

CIS Benchmarks L1

OS hardening — 55+ controls for Ubuntu, RHEL, and Windows Server against CIS Level 1.

CIS L1HardeningUbuntuRHEL

Audit log rotation vs CERT-In (180d), SEBI (2yr), RBI (5yr), PCI-DSS (1yr) requirements.

CERT-InSEBIPCI-DSS

SOC 2 Readiness

Map controls to Trust Service Criteria — Security, Availability, Confidentiality, Privacy.

DPDP Act 2023 Readiness

Data Fiduciary status, consent mechanism, DPO appointment, 72-hour breach notification, DPIA, data localisation, and grievance redressal under the Digital Personal Data Protection Act.

DPDPData FiduciaryDPODPIA

Compliance Audit Readiness

Cross-framework audit posture — last formal audit date, policy documentation, evidence collection automation, vendor risk, training, access reviews, incident records.

SEBIRBIISO 27001

Network Discovery

Asset inventory completeness, rogue device detection (NAC / 802.1X), shadow IT visibility, IPAM hygiene, external attack surface, and EOL asset tracking.

NACIPAMShadow IT

Rootkit & Deep Threat Detection

EDR coverage, file integrity monitoring (FIM), rootkit scans (rkhunter / chkrootkit), kernel hardening, hidden process detection, and persistence-mechanism review.

Software Inventory & EOL

Installed-package register, end-of-life software detection, CVE-vulnerable packages with CVSS context, missing patches, and CPE-based vulnerability matching.

EDR / XDR Posture

Endpoint detection coverage on every server, behavioural detection vs. signature-only, suspicious-process visibility, FIM scope, and incident-response automation readiness.

EDRXDRBehavioural

Not sure which assessment to start with?

Start with IT Infrastructure — broadest coverage. The AI will identify if you need something more specialised.

Start IT Infrastructure →

vH

vHarbir

SpectraAI Infrastructure Advisor

Hi! I'm vHarbir, SpectraAI's infrastructure advisor. I can help you understand your IT risks, compliance requirements, or what SpectraAI can do for your organisation. What's on your mind?

Quick Questions