Kavach watches your Linux servers, scans your code and keeps your DPDP and CERT-In evidence in one place. Every alert is mapped to MITRE ATT&CK and stitched into an attack storyline your team can act on.
EDR and SOC console for teams that run their own servers.
DevSecOps scanning for product teams heading into audits.
Smart-policing operations for police and smart-city control rooms.
One login, one tenant, one audit trail. Turn on what you need. The status tags show exactly what is shipping today.
EDR and SOC console for teams that run their own servers.
DevSecOps scanning for product teams heading into audits.
Smart-policing operations for police and smart-city control rooms.
These are illustrative incidents built only on what Kavach detects today. Pick one and watch how it unfolds, minute by minute.
Illustrative scenario. Names, addresses and times are examples.
Threats, incidents, scans and agent status stream over authenticated WebSockets, scoped to your organisation.
Admins, managers, analysts and read-only viewers on the cyber side; control-room operators and officers on the policing side.
Export PDF and CSV reports, and keep a tamper-evident audit log protected by a SHA-256 hash chain per organisation.
Kavach ships control catalogues for the frameworks Indian buyers and auditors ask about. Automated checks gather evidence from your own Kavach activity.
49
controls mapped across four frameworks
8 controls have automated evidence checks today, including MFA adoption, completed vulnerability scans, audit logging and secrets scans. The rest are assessed in the console by your team.
A security tool is a target. These protections are in the product today.
Every query, lookup and live feed is scoped to one organisation. Your data never shows up in another customer's console.
Six signals (identity, device, behaviour, network, threat intel, sensitivity) are evaluated by an OPA policy at every login.
Argon2id passwords, TOTP MFA that admins can require per role, single-use recovery codes, 15-minute RS256 tokens with rotating refresh.
Agents join with expiring, revocable org tokens and then use their own credentials. Unknown agents are rejected.
Scan targets and nmap flags are validated. Loopback and cloud-metadata addresses are always refused.
Production mode refuses to start with debug on or example secrets. Only ports 80 and 443 are exposed.
Register and you become its admin. Invite your team and set roles and MFA rules.
In Agents → Enroll agent, create a token. It is shown once and expires.
Run it on each Linux host with your Kavach URL and token: python3 kavach_agent.py
Heartbeats, events, MITRE mapping and storylines appear live in Defence.
We run Kavach for you in an India region. Your security team gets a private, multi-tenant console; your data stays in India.
Run the full platform on your own servers behind your firewall, with automatic HTTPS and nightly database backups. For defence, PSUs, banks and police.
Priced in rupees for Indian teams. Minimum 25 endpoints. Volume discounts apply automatically from 250 endpoints.
₹999 / developer / month
Code scanning on its own: SAST, dependencies and secrets for every repo. Your first repository is free, forever.
Custom
Priced per station or control-room seat, on-prem or air-gapped, with an offline licence. Talk to us about a district pilot.
₹7,07,764Total per year, including GST
Indicative quote. Final pricing is confirmed in your order form.
Start with a pilotA paid pilot proves Kavach on your servers with metrics you set. The pilot fee is credited to your first year if you continue.
We publish the roadmap so you know what you are buying today and what is on the way.
On Kavach Cloud, in an India region. On-prem customers keep everything on their own servers; nothing leaves the network.
Linux today. Windows and macOS agents are on the roadmap; tell us your mix during the pilot and we'll share timelines.
Kavach detects, maps and correlates attacks today. Response actions are recorded and sent to agents now, and on-host enforcement is the next release. Until then your team acts on the storyline's suggested steps.
Yes. Kavach includes DPDP Act 2023 and CERT-In 2022 control catalogues alongside SOC 2 and ISO 27001, with automated evidence for 8 controls and manual assessment for the rest.
No. Prices are listed before 18% GST. The quote calculator shows GST separately.
Yes. Start with a pilot of up to 50 endpoints. Shield's first repository is free.