Confirmed vs. theoretical
Every finding tells you if it's proven or still just possible.
Every attack starts at the network. Know yours first. Vedha is a network health check for growing businesses: it finds the few weaknesses that matter and proves every fix.
Mapped to the standards your bank, client or auditor asks about
The foundation
One of them holds up all the others, and it's rarely the one anyone checks.
What's protecting each layer today
Antivirus protects a machine. A firewall protects a boundary. The network is what all of it is built on, and it's the one layer that's rarely looked at by itself.
What goes wrong
Not a targeted hacker. An automated scan, looking for any open door, and it doesn't stop looking.
A password nobody's changed in years. A device still connected that everyone forgot about.
Automated scans check every business on the internet, all day. Big or small, it doesn't matter.
Billing locked. Customer data gone. The business stops functioning, without warning.
Days without income. Customers who don't come back. Trust that's hard to earn twice.
of small and medium businesses in India reported a cyber incident in the previous year.
Cisco survey, 2021, Indiaof those that had an incident said it cost them more than INR 3.5 crore.
Cisco survey, 2021, self-reportedaverage cost of a data breach in India, across organisations of all sizes.
IBM Cost of a Data Breach, 2025Survey results as published by the named sources. They describe groups of businesses, not a prediction for any one business.
That's the one question nobody's been asking.
What we're introducing
Built to be understood, not just read.
The same view an attacker gets: what's open, what's reachable, what's exposed.
Every finding is ranked, so nothing important gets buried under noise.
Ordered, plain-language steps, not a wall of jargon to interpret yourself.
The problem
Every list looks equally urgent. The weakness an attacker would really use is buried in the pile.
Sample data. Move your cursor to focus, or select a highlighted row.
Why it works
Not a basic scanner that dumps a list of scary-looking words at you.
Every finding tells you if it's proven or still just possible.
Know if a weakness is being actively used by attackers worldwide, right now.
Numbered steps with built-in verification, not just a problem list.
PCI DSS, ISO 27001, NIST, SOC 2, HIPAA, ready when a bank or client asks.
Findings tied to real-world attack techniques (MITRE ATT&CK) wherever one applies.
Plain-English answers on any finding, grounded strictly in your own evidence.
Every action is logged, dated and kept.
A real document you can hand to a bank, a client, or an auditor, not a screenshot.
Mapping supports audit preparation. It is not a certification.
What every engagement delivers
Everything you just saw on screen, working together, from where you are today to where you need to be.
How it works
probe 10.20.4.0/24
host 10.20.4.17 rdp 3389
host 10.20.4.31 smb 445
host 10.20.9.4 smb 445
host 10.20.7.9 https 443
done 4 hosts mapped (example)
Likelihood, example values.
The product
Everything that matters at a glance. Open a finding to see the proof, the exploit context and the fix. Close one and watch your grade improve.
Time left to fix, by deadline.
Sample terrain. The blue route is a confirmed attack use case.
Real attack scenarios, rebuilt and tested in a secure environment. Close a finding and watch the chain break.
Sample data, recreated for this page. Close a finding and watch the grade, the clock and the report update.
Product
Open any finding to see the proof, the route it sits on, and how to fix it. Hold the button to verify.
Sample trend, not customer data.
Choose where to break it. Fixing one hop stops the route.
Sample data. Verify a finding in its evidence panel and watch the overview, route and report update.
7-day proof of concept
The same scan one, fix, scan two loop, run on your real network with real attack scenarios.
This isn't a one-time report. It's a loop you repeat, so your network gets safer every time, not just once.
Delivered through your trusted local partner.
Speed
From a clean server to a first scan with one command. The output below is an example.
Pricing
Every plan gets every feature. You decide how much of your network to cover.
Proof of concept
See real results on your own network before you commit.
Growth
Up to 20 assets. 20 assets = $100 / month.
Continue after your POCScale
For more than 20 assets or complex environments.
Every plan includes:
An asset is one unique IP, host or domain. Prices are in US dollars.
AI, honestly
Purple marks anything written by the machine. Nothing else on this site is purple.
Terrain
Switch between every connection and the one route that matters. Hover or focus a node for its evidence.
Select a node.
Maps to
Findings are tagged to the frameworks your auditors use. Mapping supports audit preparation. It is not a certification.
file-srv-01, sample finding
Sample mapping
Our name
Vedha, said VAY-dha. It means to pierce through.
In the old story, a teacher asks his students what they see when they aim at a bird in a tree. Most describe the tree, the leaves, the sky. Arjuna says he sees only the bird's eye. Vedha is built on that idea.
Our mark is a seal, the old Indian symbol for "this is real", with an eye inside it. The pupil fills only when a finding is proven.
The dot lattice in our terrain is inspired by pulli kolam, the daily threshold drawing of Tamil Nadu: a grid of dots and a line that encloses every one. We borrowed the idea with respect, and we credit it here.
The seal
Four parts, each with a job. The rounded square is the seal, the stamp of "this is real". The notch is the pierce. The eye is clear sight. The pupil is the one finding that matters.
Loads one graphics library, only when you ask.
Right now
CISA keeps a public list of vulnerabilities known to be exploited. At launch this strip is filled on the server at build time, with the source and update time shown. In this preview you can load it once, live.
Press the button to load the five most recent entries. This makes one request to cisa.gov, and one to first.org for likelihood scores, only when you ask.
Trust
This page loads no trackers, no external fonts and no outside scripts.
Questions, or found something that looks wrong? Write to info@vedhasec.com.
Every sample on this page is marked as a sample. We never show a number as a customer result unless it is real and permitted.
Networks you run yourself, such as office and on-premise networks.
FAQ
Vedha is a network health check for growing businesses. It scans your network the way an attacker sees it, finds the few weaknesses that matter most, ranks them by real-world risk, gives a plain-language plan to fix them, and re-scans to prove each fix worked.
Growing small and medium businesses that run their own networks and do not have a dedicated security or IT team watching over them.
The proof of concept runs over 7 days: agree the scope, run a first full-intensity scan for your starting grade, test real attack scenarios, fix what matters with periodic scans, then a second full-intensity scan that shows your before-and-after results side by side.
Continuous protection is USD $5 per asset per month (up to 20 assets, which equals $100 / month). Larger or complex environments use custom pricing. You can start with a 7-day proof of concept. An asset is one unique IP, host or domain.
A normal scanner dumps thousands of findings. Vedha confirms what is real versus theoretical, joins findings into the actual routes an attacker could follow, ranks them by how they would be exploited, and closes the loop by re-testing until a fix is proven.
PCI DSS, ISO 27001, NIST CSF, SOC 2, HIPAA and CIS Controls. This mapping supports audit preparation and is not itself a certification.
Vedha assesses networks you run yourself, such as office and on-premise networks. Nothing is scanned until you agree the scope and give written authorisation.
Email info@vedhasec.com or book a 7-day check on this page. First we agree the scope with you — what to test and what success looks like — and nothing is scanned until you sign off.
Get started
Leave your email and we will get in touch. First we agree the scope with you: what to test, what we may test, and what success looks like. Nothing is scanned until you sign off.
About us
Vedha is a network health check for growing businesses with no security or IT team watching over them.
Security is built in layers: your data and users, your applications, your systems and your network. Most businesses protect the first three. The network holds up all the others, and it is rarely checked on its own. We built Vedha to check it.
Scan one shows where you stand. You fix what matters, using an ordered plan in plain words. Scan two shows what is fixed, what is new and what is still open.
Vedha reaches businesses through trusted local partners, so a check comes from someone you already know. If you look after growing businesses, we would like to hear from you.
We have no open roles listed right now. We still like hearing from people who care about making security clear for growing businesses. Tell us what you would like to work on.
Questions about the 7-day check, pricing, privacy or anything else? Write to us. We reply by email.
If you think you have found a problem with our website or service, email us with what you found, how to see it again and how to reach you. Please do not look at or change data that is not yours.
Privacy
Your email address. If you choose to tell us, your company name and what you would like checked first.
Only to reply about your 7-day check and to agree the scope with you.
Our team at Vedha. We use a hosting provider to run this website and an email provider to deliver your message to us. They handle your details only to do that job.
Up to 12 months after we last spoke, unless you ask us to delete it sooner.
You can ask to see, correct or delete your details at any time. Write to info@vedhasec.com.
This website does not use cookies or tracking tools.
Last updated 3 October 2026.
Decode this and enter the flag.
VkVESEF7bG9vay1jbG9zZXJ9