Frequently Asked Questions

We walk through whichever Bitkosh product is most relevant to you — the ISO ISMS compliance platform, Healthcare EHR, the AI GST suite, School Bus Manager, or a custom build — using your specific workflows, and answer any technical questions on the spot.

An engineer who actually builds the product, not a generic sales representative. You'll speak with someone who understands the nuances of security audits, GST filings, patient records or fleet operations, and can explain exactly how the system handles each.

Most demos run 30 to 45 minutes, with direct access to our product engineers throughout. Pick a slot on the contact page, or send the contact form — we'll work around your schedule, and there's no obligation whatsoever.

Systems integrators, IT services firms, CA practices, security consultancies and technology providers serving their own clients. Bitkosh products are designed to complement existing systems and integrate with operational platforms, compliance tooling and ERP software.

Write to info@bitkoshtechnologies.com with a short note about your business and the kind of partnership you have in mind, and we’ll set up a call.

A full program: penetration testing, vulnerability assessments, ISO 27001 / SOC 2 compliance, Zero Trust and secure architecture, cloud & network security, IAM, threat intelligence, incident response, and security awareness training.

At least annually, and after any significant change to your infrastructure or application architecture. Regulated or high-risk environments often benefit from a continuous or quarterly cadence.

Yes — CERT-In, RBI, SEBI, IRDAI, NPCI UPI and UIDAI audits are all part of our regulatory practice, alongside global frameworks like ISO 27001 and SOC 2.

DPDP Act 2023 is India's own data protection law with distinct consent, breach-notification and data-fiduciary obligations — similar spirit to GDPR, different specifics. We scope DPDP engagements for the Indian regulatory text, not a GDPR checklist with the labels swapped.

Three models: fixed-fee for defined scopes like gap assessments and penetration tests; monthly retainers for vCISO and fractional AppSec leadership; and per-session pricing for workshops and training. Indian engagements are priced roughly 60–70% below Big4 rates, and DPIIT-recognised startups get a discount on their first engagement.

No. The consultancy stands on its own. Clients who do adopt the platform get a discount on advisory work and vice versa, but every engagement is delivered independently of whether you license our software.

Security engineers, SOC analysts, GRC professionals, and developers who want a rigorous, hands-on credential in offensive and defensive security fundamentals.

No — the course starts from fundamentals and progresses into specialized tracks, so it works for beginners and for experienced practitioners filling specific skill gaps.

The course is a standardized curriculum for individuals. Corporate Training is a custom program built around your specific team, stack, and risk profile — often blended with tabletop exercises and compliance evidence.

Book a call or send an enquiry and we'll share the current cohort schedule and open seats.