Browse the site
Services
Who We Serve
Problems We Solve
Across India
Guides & Resources
Company
Authorised · India-wide · Since 2022

Cyber security that a business owner in Kochi can actually use

AAVETech is an AI-assisted ethical hacking and cyber security firm founded in 2022 and based in Kochi, Kerala. The team runs authorised penetration tests, 24/7 incident response, ransomware recovery, deepfake takedowns, digital forensics and awareness training for individuals, small businesses and enterprises across India.
Founded
2022, Kochi
Emergency response
Under 4 hours
Delivery
Remote & on-site across India
Assessment turnaround
5–10 working days
Retest after fix
Included as standard
Reporting
Technical + plain-English

What we do, and what you actually get

Six services cover the overwhelming majority of what people call us for. Each one has a defined scope, a stated price band, and a delivery date you can put in a plan. You are not buying hours; you are buying a finding, a fix, and proof that the fix held.

VAPT & Penetration Testing

Authorised vulnerability assessment and penetration testing for web, mobile, API and network.

₹45,000 – ₹3,50,000 depending on scope and number of assets

Web Application Security

Web app testing that reads like a breach report, not a scanner dump.

₹45,000 – ₹2,50,000

Mobile App Security Testing

iOS and Android testing of the app binary, the API behind it, and the data it stores.

₹60,000 – ₹2,50,000

API Security Testing

Where most modern breaches actually happen, and where most scanners never look.

₹50,000 – ₹2,00,000

Network Penetration Testing

Internal network, external perimeter, firewall and segmentation testing.

₹75,000 – ₹3,00,000

Cloud Security Assessment

AWS, Azure and GCP configuration review, plus container and Kubernetes testing.

₹80,000 – ₹3,50,000

Incident Response & Retainer

24/7 help when something is already happening — and a retainer to stop it happening.

₹1,50,000 – ₹9,00,000 per year, or per-incident from ₹35,000

Ransomware Recovery & File Unlock

When files are encrypted, the priority is containment first and recovery second.

₹40,000 – ₹5,00,000 depending on estate size and encryption type

Website Malware Removal

Blacklisted, defaced, injecting spam, or sending phishing mail from your server.

₹15,000 – ₹75,000

Deepfake & AI Abuse Protection

Detection, takedown and monitoring for AI face swaps, voice clones and impersonation accounts.

₹25,000 – ₹4,00,000 for a monitoring retainer

Digital Forensics & Evidence

For the case where it is not a system you own — it is a question you have to answer.

₹30,000 – ₹2,50,000

Account Recovery & Data Recovery

Lost or locked accounts, and lost files — recovered with proof of ownership.

₹5,000 – ₹50,000 per account or device

See all 31 services →

Why the work is defensible

A penetration test that only finds what an automated scanner finds is not a penetration test. It is a subscription. The parts of this job that matter are the judgement calls: which finding actually matters to your business, which one is a false positive, and what the attacker would do next. That is why every engagement is signed off by a named analyst and every finding carries a business-impact note, not just a CVSS number.

Who we work with

The same technical skills apply everywhere, but the risk you are actually managing depends on what you do. These pages set out what matters in your situation rather than repeating the same service description with a different name on it.

For Individuals

personal digital safety

For Small Businesses

the smallest viable security

For Startups

security that scales with you

For Enterprises

risk, evidence and defensibility

For Banks & Financial Services

a regulated environment

For Hospitals & Healthcare

patient data and clinical safety

For Schools & Colleges

a mixed device estate and a young audience

For E-commerce & Marketplaces

transactions and customer data

See all 18 audiences →

Common problems we are called about

These are the situations that arrive in our inbox most often, and what we check when they do. If your situation is on this list, the page below will tell you exactly what we look at and what you will get back.

Is My Phone Hacked?

How do I know if my phone has been hacked?

Has My Email Been Compromised?

How do I check if my email account has been hacked?

Has My Website Been Hacked?

How do I know if my website has been hacked?

Ransomware Attack Recovery

What should I do if I have been hit by ransomware?

A Deepfake of Me Is Online

How do I remove a deepfake video of me?

Am I Being Phased?

How can I tell if I am being phished?

See all 15 problems →

Coverage across India

Most engagements are delivered remotely. On-site work is scheduled where the engagement needs physical access, a formal kickoff with your team, or a site survey.

All states and cities →

Questions we get asked

What does AAVETech do?
AAVETech is an AI-assisted ethical hacking and cyber security firm in Kochi, Kerala, founded in 2022. We run authorised penetration tests and vulnerability assessments, 24/7 incident response, ransomware recovery, deepfake and AI-abuse takedowns, digital forensics, account recovery and security awareness training, for individuals, small businesses and enterprises across India.
Do you only work with large companies?
No. A meaningful share of our work is for individuals and small businesses who cannot buy a six-week consulting engagement. The difference is scope and price, not whether we will take the work.
How do you get paid and what does it cost?
Engagements are fixed-scope with a stated price band and a delivery date agreed before work starts, or monthly for retainers. A single web application penetration test typically lands between ₹45,000 and ₹1,20,000. We do not bill by the hour for assessment work, because hourly billing rewards the wrong behaviour.
How fast can you start?
Most assessment engagements begin within five to ten working days of a signed scope. For an active incident — ransomware, a live breach, a deepfake spreading now — retainer clients are engaged within four hours, and non-retainer clients within twelve.
Is this legal?
Yes, provided the client has authority over the systems being tested. That is why every engagement begins with a written authorisation and a rules-of-engagement document naming the systems, dates and scope. We do not work on systems a client does not control.

What "ethical" means in practice

The word is used loosely in this industry, so it is worth being precise about our position. AAVETech works only on systems a client owns or has given us explicit written permission to test, and only inside the signed scope and time window. We do not sell access to accounts, devices or systems that a person does not own or control. We do not help monitor a partner's phone without their informed consent, and we do not assist with unauthorised access under any framing.

That is not a marketing position, it is a legal and practical one. Work done without authorisation is a criminal offence under the Information Technology Act, 2000, and it is also the fastest way for a client to end up in a legal problem rather than a security one. Read the authorisation and rules of engagement page for the detail.

Tell us what is going on

Send a short description of the problem and the systems involved. You will get a direct answer about whether we can help, what it will cost, and how quickly we can start — from an analyst, not a form responder.

Request a quote See pricing

Last reviewed: 24 October 2026. Information on this page is general guidance, not legal advice. Prices are indicative bands for a typical scope and are confirmed in a written quote before any work begins.