You're already visible
Your website, email domain, client portals and forgotten test pages are all reachable from the internet, whether or not anyone is watching them.
Security checks built for Indian small businesses
See your business the way an attacker does.
One external scan of your website, email and internet-facing systems. One plain-English report with a traffic-light risk score, your top risks explained in business terms, and clear steps to fix them. No jargon. No big-consultancy price tag.
- Only what you authorize in writing
- Non-destructive & rate-limited
- No passwords needed
- Pay per scan
The problem
Small businesses are targets too. Big security audits aren't built for them.
Attackers use automated tools that scan the whole internet for easy wins. They don't check how big you are first.
Full pentests cost too much
Traditional penetration tests are priced and scoped for large companies. Most CA firms, clinics and local shops simply can't justify the spend.
Scanner output is unreadable
Free tools dump hundreds of cryptic alerts with no priorities. You're left guessing what actually matters and what to do next.
Built for businesses like:
- CA & accounting firms
- Clinics & diagnostic centres
- Local e-commerce & retail
- Web & digital agencies
How it works
Four simple steps, from sign-off to verified fix
-
01
Authorize
You tell us exactly which domains and systems to check, and sign a short written authorization. Nothing outside that list is touched.
-
02
Scan
We run a careful, non-destructive external scan, from the outside in, the same view an attacker gets. Your business keeps running as normal.
-
03
Report
You get a plain-English report: a traffic-light score, your top risks explained in business terms, and the evidence behind each one.
-
04
Fix & retest
Follow the clear fix steps (or hand them to your IT person). We independently retest before anything is marked as fixed.
What you get
A report you can actually read
Written for owners and partners, not just IT. Every finding answers three questions: what's wrong, why it matters to your business, and how to fix it.
- Traffic-light risk score — see your overall position at a glance.
- Top risks in business terms — "someone could send email pretending to be you", not just a code.
- Evidence-backed findings — each issue comes with proof of what we observed, so nothing is guesswork.
- Clear, prioritized fixes — step-by-step actions you or your web/IT provider can follow.
SAMPLE
exposure-report — example-business.in
Overall risk
AMBER
Some important issues to fix soon. Nothing appears to be actively exploited.
1High
2Medium
1Low
| Risk | Finding | What it means for you | Fix |
|---|---|---|---|
| High | Admin login page publicly reachable | Anyone online can try to guess passwords to your site's control panel. | Restrict by IP or add two-factor login. |
| Medium | No DMARC email policy | Scammers could send emails that look like they come from you. | Publish a DMARC record (we give you the exact text). |
| Medium | Outdated website plugin version | Known weaknesses in old versions are commonly targeted. | Update the plugin and enable auto-updates. |
| Low | Server reveals software version | Makes it slightly easier for attackers to plan. | Hide version banners in server settings. |
Monthly re-scan comparison
You fixed 3 of 4
Before → after view, available with the monthly plan.
Pricing
Start free. Pay per scan when you want the full picture.
No long contracts. Begin with a free Quick Check, then choose a one-off scan or keep watch every month.
Quick Check
₹0 one per business
A light, passive health check of your main domain, so you can see whether a full scan is worth it.
- Your main website domain only
- Email spoofing protection (SPF / DKIM / DMARC)
- SSL / HTTPS certificate and setup
- Basic security headers
- Short summary with your top issues
Uses only publicly visible information. No active scanning of your systems.
Get my free Quick CheckFull Scan
₹4,999 per scan + GST if applicable
A complete, authorized external scan of everything you list, from the outside in.
- Everything in Quick Check
- Website and subdomains you authorize
- Exposed login pages and open ports
- Outdated software and known weaknesses
- Full plain-English report with traffic-light score and evidence
- Prioritized fix steps + one free retest of fixes
Monthly Watch
₹1,099 /month + GST if applicable
Ongoing re-scans so new problems don't sneak in.
- Everything in Full Scan
- Monthly re-scan of your authorized assets
- Before / after report: "you fixed X of Y"
- Independent retest of every fix
- New exposures flagged in each re-scan
What's checked
- Your website
- Subdomains you authorize (e.g. portal., mail., test.)
- Email security: SPF, DKIM, DMARC (can someone fake your email?)
- SSL / HTTPS certificates and configuration
- Exposed login pages and open ports
- Outdated, publicly visible software versions
What's not checked
- Your internal office network, PCs or Wi-Fi
- Staff phishing tests or social engineering
- Not a full penetration test — we don't try to break in
- Not a CERT-In empanelled audit or compliance certificate
Need one of these? Ask us and we'll point you in the right direction.
Trust & ethics
Security work should be done the right way
Why trust us? Not because of big claims, but because of how we work: written authorization before every scan, a clearly published scope, and evidence behind every finding. Judge us by the rules below and by our sample report.
Authorization first
We only scan what you've authorized in writing. No signed authorization, no scan. Ever.
Non-destructive
Scans are careful and rate-limited, designed not to disrupt your website, email or day-to-day work.
Confidential
Your findings are yours. Reports are shared only with the people you name, and never published.
Evidence-backed
Every finding includes what we observed and how, so you can verify it and avoid chasing false alarms.
Independent retest
Nothing is called "fixed" until we've retested it ourselves and confirmed the issue is gone.
Transparent scope
You see exactly what's checked and what isn't before you sign, and you can review a sample report before paying anything.
Authorization first — always. Scanning or accessing computer systems without the owner's permission can be an offence under India's Information Technology Act, 2000 (Sections 43 and 66). That's why every RakshaNet scan starts with a signed, written authorization that lists exactly what we may test, and we never go beyond it.
Want to see it first? We're happy to share our one-page authorization template before you sign up — just ask on WhatsApp or email hello@rakshanetsecurity.in.
FAQ
Questions business owners ask us
Is this legal and safe?
Yes, when it's authorized. We only scan systems you own or are authorized to have tested, and only after you sign a short written authorization listing exactly what's in scope. Testing without permission can be an offence under India's IT Act, 2000 (Sections 43 and 66), which is exactly why we never skip this step.
Will the scan break or slow down my website?
It's designed not to. Our scans are non-destructive and rate-limited: we look at what's exposed from the outside, we don't try to exploit anything, and we don't flood your site with traffic. Your website and email keep running as normal.
Do you need my passwords or access to my systems?
No. We never ask for passwords, logins or access to your computers. We check what anyone on the internet can already see — that's the whole point.
What do I need to do?
Very little. Fill in the form (or message us on WhatsApp), sign the one-page authorization we send you, and read the report. If fixes are needed, you can follow the steps yourself or forward them to your web developer or IT person.
Is this a penetration test?
No. This is an external exposure and vulnerability scan, not a full penetration test. We don't try to break in, test your internal network or run phishing tests on staff. It's also not a CERT-In empanelled audit or a compliance certificate. For many small businesses it's the right, affordable first step.
Who sees my report?
Only you and the people you name. Reports are confidential, sent only to the contacts you give us, and never published or shared with anyone else.
Can you work with my web agency or IT person?
Yes. With your permission we can send the report directly to your agency or IT provider and answer their questions. Agencies can also request scans for their clients, as long as each client signs the authorization.
Do you provide a GST invoice?
Every paid scan comes with a proper invoice. Any applicable GST is added to the listed price.
Get started
Get your free Quick Check
Tell us a little about your business and the website you'd like checked. We'll reply within 1 working day with next steps and a short authorization form to sign before any scanning begins.
- No scanning happens until you sign the authorization
- No passwords or system access needed
- Your details stay confidential
- No obligation to buy anything
Prefer to chat? Message us on WhatsApp or email hello@rakshanetsecurity.in.
Thank you — request received!
Here's what happens next:
- Within 1 working day we'll email you a short authorization form listing exactly what will be checked.
- Once you sign it, we run your Quick Check. No passwords or access needed.
- You get a plain-English summary with your top issues and how to fix them.
Meanwhile, see what a sample report looks like.