Talk to Someone Who
Knows the Work

Yes. While our office is in Kathmandu, we work with organisations across South Asia and internationally on a remote basis. Cybersecurity consulting, VAPT, cloud architecture and digital growth services can all be delivered without being on site. For clients who prefer in-person engagement, we can arrange visits within Nepal.

VAPT stands for Vulnerability Assessment and Penetration Testing. It is a structured process where we identify, and then attempt to exploit, weaknesses in your systems, applications or network in the same way a real attacker would, before a real attacker does. Most organisations in Nepal need at least a basic assessment. If you handle customer data, financial transactions, or operate in a regulated sector such as banking, healthcare or telecoms, a VAPT is not optional. It is a compliance requirement.

For smaller scoped work such as a single-application VAPT or a security review, we can typically begin within one to two weeks of agreeing scope and terms. Larger engagements, including multi-system assessments, cloud migrations and training programmes, require a planning phase. We usually need two to four weeks to fully mobilise. Contact us early if you have a deadline. We will always be straightforward about what is achievable.

Yes, without hesitation. For any engagement involving access to your systems, data or sensitive business information, we sign a mutual NDA before any work begins. We also maintain strict data handling protocols and provide scoped authorisation letters for penetration testing so that all testing activities are formally documented and legally covered for both parties.

Pricing depends on scope, complexity and the time required. For VAPT and security consulting we quote a fixed price per engagement so you know the full cost upfront. For ongoing services such as cloud management or digital growth, we use a monthly retainer model. We do not charge for the initial consultation or for producing a proposal. There is no financial commitment until you agree to a scope of work in writing.

Absolutely. Most of our clients have internal IT staff. We work with them, not around them. For VAPT engagements we coordinate with your IT team to agree testing windows and avoid operational disruption. For cloud and digital projects we can act as an extension of your team, handling specialised work while your staff continue with day-to-day operations. Knowledge transfer and clear documentation are a standard part of every engagement.

A few things set us apart. We are a small, focused team, which means you deal directly with the people doing the work rather than with account managers or intermediaries. We specialise in cybersecurity and digital technology rather than trying to cover every IT service. We give honest assessments, even when the answer is not what a client hoped to hear. We build long-term relationships based on results. Our partner ecosystem also means we can coordinate specialised services that go beyond our own team where the project calls for it.