# TensorShield

> TensorShield runs continuous AI-driven penetration testing on your web apps and APIs, proves what is exploitable, and delivers SOC 2 and ISO 27001-ready VAPT reports on demand, reviewed and signed by a senior security engineer.

TensorShield is a continuous penetration testing (PTaaS) provider for external web applications and REST/GraphQL APIs, based in India and serving customers worldwide. Built by ex-Google engineers. Its main product is Continuous: AI agents pentest customers' apps every week and on every release, with a signed yearly VAPT report included. A one-time Audit-Ready Pentest (report in 5-7 business days) is also available. A senior human expert verifies every serious finding and signs every report. Reports map to SOC 2 (CC4.1, CC7.1, CC8.1) and ISO/IEC 27001:2022 (Annex A 8.8, 8.29, 8.32).

Key facts:
- Positioning: "Always-on pentesting. Audit-ready on demand." (Security at machine speed). Philosophy: offense is the best defense.
- Methodologies: OWASP WSTG, OWASP Top 10:2025, OWASP API Security Top 10, OWASP ASVS 5.0, PTES, NIST SP 800-115; CVSS 3.1 and 4.0 computed from vectors.
- Safety: network-enforced scope allow-lists, non-destructive defaults, rate limits, kill switch, static egress IPs, vaulted credentials, hash-chained audit logs. Testing only with signed authorisation.
- Not CERT-In empanelled; not a PCI DSS 11.4 or CERT-In-mandated audit provider.
- Founder: Ashish Mishra, 15+ years in cybersecurity at Google and Intel (https://www.linkedin.com/in/eashishm/).
- Contact: tensorshield@gmail.com, +91 80049 20400.

## What we sell (INR excludes 18% GST; an "app" is one web application plus the APIs it uses)
- Audit-Ready Pentest: $2,990 / ₹99,999 per app (one-time · fixed price). Best for: you need a pentest report now. Includes: Expert-led + AI pentest of one web app and its APIs; Every finding verified by a senior expert, with proof; VAPT report mapped to SOC 2 and ISO 27001; Signed attestation letter for auditors and customers; Free retest within 30 days, with an updated letter; Report in 5–7 business days.
- Continuous: $333 / ₹16,666 per month, billed yearly at $3,990 / ₹1,99,990 (up to 3 apps). Best for: you ship often and want to stay audit-ready. Includes: Everything in Audit-Ready Pentest, once a year; AI testing every week and on every release; Critical issues verified and alerted within 24 hours; Unlimited retests as you fix; Quarterly evidence reports for your auditor; Alerts in Slack, Jira, GitHub or email.
- Scale: from $833 / ₹41,666 per month, billed yearly at $9,990 / ₹4,99,990 (up to 10 apps). Best for: you have 4 or more apps. Includes: Everything in Continuous, for up to 10 apps; Two audit-ready pentests a year; Quarterly expert deep-dive testing; Critical issues alerted within 12 hours; A named security analyst; White-label reports for agencies.

## Why choose TensorShield
- Versus traditional pentest firms ($5,000–25,000, 2–6 weeks): fixed published price, report in 5–7 business days, plus optional testing on every release.
- Versus automated scanners: every serious finding is verified by a senior expert with proof, and reports are built to what SOC 2 and ISO 27001 auditors check.
- Founder-led by Ashish Mishra, 15+ years in cybersecurity at Google and Intel.

## Pages
- [Home](https://www.tensorshield.in/): overview of continuous AI pentesting and compliance evidence
- [How it works](https://www.tensorshield.in/platform): pipeline, cadence, OWASP API Top 10 coverage, finding lifecycle, onboarding
- [Pricing](https://www.tensorshield.in/pricing): the three offers, how to choose, comparison with alternatives
- [SOC 2 penetration testing](https://www.tensorshield.in/compliance/soc-2-penetration-testing): CC4.1/CC7.1 mapping, Type I vs Type II timing
- [ISO 27001 penetration testing](https://www.tensorshield.in/compliance/iso-27001-penetration-testing): Annex A 8.8/8.29/8.32 mapping
- [VAPT services in India](https://www.tensorshield.in/vapt-india): fixed INR price, VAPT certificate, GST invoice, CERT-In note
- [Trust & safety](https://www.tensorshield.in/trust): guardrails, methodology, AI disclosure
- [Startups](https://www.tensorshield.in/solutions/startups): pass your first soc 2, win enterprise deals
- [Growing teams](https://www.tensorshield.in/solutions/enterprise): every product, every release, one analyst
- [Fintech](https://www.tensorshield.in/solutions/fintech): payments, lending and banking apis
- [Healthtech](https://www.tensorshield.in/solutions/healthtech): patient data, portals and clinical apis
- [About](https://www.tensorshield.in/about): founder and principles
- [Contact](https://www.tensorshield.in/contact): phone, email, WhatsApp, scoping form

## Optional
- [Full content for LLMs](https://www.tensorshield.in/llms-full.txt)
- [Machine-readable pricing (JSON)](https://www.tensorshield.in/pricing.json)
- [Privacy policy](https://www.tensorshield.in/legal/privacy)
- [Terms of service](https://www.tensorshield.in/legal/terms)
- [Responsible disclosure](https://www.tensorshield.in/legal/responsible-disclosure)