National initiative by TrojanByte Labs
Making Digital Bharat Surakshit
Our public-interest initiative providing free VAPT reports to eligible organisations, because every Indian’s data deserves protection, not just those who can afford an audit.
Free VAPT Report
A professional vulnerability assessment report at no cost.
Actionable Fixes
Clear, prioritised remediation guidance for every finding.
Confidential & Authorised
Testing starts only after verified ownership and written consent.
How it works
Four Steps to a Safer Website
-
1
Apply online
-
2
Verify ownership & authorise
-
3
Security assessment
-
4
Receive your report
Ground rules
Ethical, Verified, Confidential
-
Only Systems You Control
Apply only for websites and applications your organisation owns or is authorised to have tested.
-
Verified Ownership
You prove control of the domain by adding a DNS TXT record we provide.
-
Written Authorisation
Testing begins only after we receive signed, written authorisation.
-
Confidential Results
Findings are shared only with the verified applicant.
Who can apply
Built for Organisations That Protect People’s Data
Applications currently cover public-facing websites, web applications and APIs. Eligibility, scope, timelines and limitations are confirmed individually for every application.
- Small or micro business
- Startup
- NGO / non-profit
- School, college or university
- Government or public body
FAQ
Questions About the Initiative
Is the VAPT report really free?
What can be tested?
How do I prove that I own the website?
When does testing start?
Who sees the results?
Ready to Make Your Website Safer?
Applying takes about five minutes. You can upload your authorisation letter now or send it later.