Support, SLAs & operations FAQs

Bitkosh typically responds within one business day of receiving a message through the contact form. An engineer reviews the enquiry personally rather than an automated system, and replies with initial thoughts, clarifying questions and a suggested next step before any call gets scheduled.

You speak to an engineer, not a call centre. Bitkosh's contact page states that messages are reviewed properly rather than handled by an auto-responder, and product demos are run by an engineer who actually builds the product rather than a generic sales representative.

An engineer reads the message properly instead of an auto-responder handling it. You then get a reply within a business day, including first thoughts, questions and a suggested next step. That is normally followed by a 30-minute call to confirm scope, timeline and a straight answer on feasibility.

Yes. The contact page lets you skip the form entirely and book a 30-minute call straight from the calendar, or message Bitkosh on WhatsApp instead. This works alongside the standard form, which is still reviewed by an engineer and answered within a business day.

Most Bitkosh demos run 30 to 45 minutes, with direct access to the product engineers throughout the session rather than a rotating cast of sales staff. You can book a slot from the contact page or send the enquiry form instead, and Bitkosh works around your schedule.

A demo walks through whichever Bitkosh product is relevant to you, using your own workflows rather than a fixed script. It also covers your current pain points, how the platform integrates with your existing systems, how data stays secure and compliant, and how it streamlines day-to-day operations.

Bitkosh's call and WhatsApp line, +91 63706 00274, is staffed Monday to Saturday from 9:00 AM to 6:00 PM IST. Enquiries can also be sent to info@bitkoshtechnologies.com at any time, and the contact page notes that messages are typically answered within one business day.

No. Bitkosh's registered office is in Kataka, Odisha, India, and the team operates on IST, but the contact page states that delivery is remote worldwide. International clients use the same email and phone channels as domestic ones; scheduling just needs to account for the IST time zone.

No. The contact page states there is no sales spam and that any details submitted are used only to reply to that specific enquiry, in line with Bitkosh's privacy policy. There is nothing on the site suggesting contact details are added to a marketing or newsletter list.

Yes. The contact page has a dedicated section for partnership inquiries, aimed at organisations that already serve their own clients and want to bring Bitkosh into that relationship. This can be raised through the same contact form used for direct project enquiries, rather than a separate process.

Bitkosh consultancy engagements move through three stages: discovery, scoping and delivery. Discovery is an intake call to understand your drivers, such as a certification deadline or a customer questionnaire, before any scope is proposed. Scoping then produces a written statement of work with fixed pricing, and delivery ends in a close-out walkthrough.

Scope changes go through a documented change request rather than arriving as a surprise invoice. The original statement of work already sets explicit inclusions, exclusions, timeline, pricing and acceptance criteria, so any deviation from that plan is recorded and agreed before it affects cost or schedule.

You receive a statement of work, severity-rated findings scored with CVSS v4 or the ISO 27005 risk matrix, and a prioritised remediation roadmap with named owners and timelines. Delivery also includes an executive summary written for a board or customer audience, plus a close-out walkthrough of the findings.

Yes. Bitkosh consultancy projects include a close-out walkthrough plus 30 days of follow-up support after delivery, covered under the original project scope rather than billed separately. This gives your team time to ask questions or clarify remediation steps before the engagement is treated as fully closed.

Yes. Alongside fixed-scope work such as a gap assessment or penetration test, Bitkosh also offers retainer engagements for ongoing advisory, including a Virtual CISO retainer for fractional security leadership, as well as workshop or training formats for teams that want a bounded scope instead of continuous support.

A once-a-year audit only tells you where you stood on the day it was performed. Managed security services, such as Bitkosh's SOC as a Service, instead monitor continuously, so issues become visible as they happen rather than being discovered only at the next scheduled review.

Yes, through SOC as a Service. It gives you Security Operations Center coverage and continuous threat monitoring without needing to build and staff that function in-house, intended for teams that do not already run their own 24/7 security operation. This sits within Bitkosh's wider managed security lineup alongside DLP and MDM.

Managed clients get priority incident response for containment and investigation without needing to negotiate a new contract first. This is bundled into Bitkosh's managed security offering alongside SOC as a Service, data loss prevention, mobile device management and dark web monitoring, rather than sold as a standalone add-on.

Standard-scope managed security engagements are offered at flat starting rates rather than a fully custom quote, for example SOC as a Service starting from ₹35,000 per month at the startup tier. Bitkosh notes that final pricing still depends on scope, environment complexity and compliance requirements.

The form asks for your name, work email, and a short description of what you need help with, plus three optional fields: engagement type (fixed-scope project, ongoing retainer, or workshop), a budget range, and a rough timeline. None of the optional fields are mandatory, so a bare project description is enough to get a reply, but filling them in helps the reviewing engineer respond with a more specific first answer.

No. The contact form's budget field includes a Prefer to discuss option alongside ranges such as under ₹1,00,000, ₹1,00,000 to ₹5,00,000, ₹5,00,000 to ₹15,00,000, and ₹15,00,000-plus, so you can leave it open. An engineer still reviews your message and replies within a business day; pricing gets discussed properly once your scope is understood, not guessed at from a form field.

That's fine, the contact form's timeline field has a Just exploring option alongside ASAP, within one month, one to three months, and three to six months. Picking Just exploring doesn't slow down or change the reply you get: an engineer still reads the message and responds within a business day with initial thoughts and a suggested next step.

A Bitkosh statement of work spells out explicit inclusions and exclusions, the project timeline, the pricing, and the acceptance criteria the final deliverable will be judged against, all agreed before delivery work begins. It exists so both sides know exactly what is and isn't in scope from day one, which is what allows the engagement to be quoted as a fixed price rather than an open-ended estimate.

Yes, every consultancy engagement includes an executive summary written for people who weren't in the technical sessions, so it can go straight to a board, investor, or enterprise customer without translation. It sits alongside the technical deliverables such as severity-rated findings and the remediation roadmap, and is walked through during the close-out session at the end of the engagement.

Before any monitoring or testing begins, Bitkosh confirms authority to act, the scope boundaries, data classification, the stakeholders involved, the critical assets in play, and the acceptance criteria for the engagement. This baselining step is what lets a government program and a commercial client go through the same structured process while still getting a scope that matches their actual risk and authority.

Once scoping is agreed, Bitkosh specialists work to an agreed evidence-led plan with defined checkpoints, escalation paths, and an auditable record of every decision and action taken. That record is what gets handed back to you at close-out, so your leadership can verify what was actually done rather than taking a final report on faith.

Yes, Bitkosh's delivery process is explicitly structured to work for government programs as well as commercial engagements, so technical teams can act on findings and leadership can still verify progress. Government and regulated program owners are named alongside CISOs, IT and engineering teams, and risk, compliance and procurement teams as who the managed security service is built for.

Yes, startups preparing for Series A due diligence are one of the groups Bitkosh's consultancy work is explicitly built for, alongside SMEs pursuing ISO 27001 or DPDP Act compliance and HealthTech or FinTech teams facing sector regulation. The engagement is still scoped and fixed-price like any other project, sized to what an investor or diligence questionnaire is actually asking for.

Yes, the contact form lets you select Workshop / training as the engagement type, separate from a fixed-scope project or an ongoing retainer. Secure Development Training is also listed in Bitkosh's own consultancy catalogue, so a training-only engagement is a normal request rather than something you have to negotiate alongside a bigger project.

It correlates telemetry from across your cloud environment, endpoints, and network in one place, rather than leaving each layer to its own separate tool and dashboard. This is the detection engine behind Bitkosh's SOC as a Service and AI-Powered MDR offerings, built in-house rather than bought as an off-the-shelf product, which lets it plug straight into the same monitoring and response workflow.

Yes, Bitkosh's Mobile Device Management service covers device compliance checks, remote wipe, and policy enforcement across your entire device fleet, not just a pilot group. It's delivered as part of the managed security catalogue alongside SOC as a Service, DLP, and dark web monitoring, so device policy sits under the same ongoing oversight as the rest of your security posture.

Yes, Dark Web and Brand Monitoring checks for leaked credentials and company data showing up where it shouldn't, and if your brand or executives get targeted, Bitkosh also offers take-down services and online reputation management on top of the monitoring itself. It's one of the standing services under the managed security catalogue rather than a one-off scan.

It's ongoing. Bitkosh's managed DLP service is monitored and tuned continuously rather than configured once and left alone, because what counts as sensitive data leaving your organisation, and how it tries to leave, changes as your business does. It sits under the same managed security umbrella as SOC as a Service, MDM, and dark web monitoring.

Bitkosh builds ISO 27005 or NIST-aligned risk registers, reviews the security posture of your third-party vendors, and audits your cloud configuration against CIS Benchmarks across AWS, Azure, and GCP. The output is a documented risk picture you can act on or hand to a customer or auditor, not just a checklist saying vendors were looked at.

Yes, that's the Virtual CISO service, fractional security leadership delivered on retainer rather than a one-off project. It covers board-level governance, programme management, and regulatory interaction, so you get senior security decision-making without carrying a full-time executive salary, and it can run alongside other consultancy or managed security work Bitkosh is already doing for you.

Yes. The transition deadline from the 2013 edition to ISO 27001:2022 has already passed, so a legacy 2013 certificate now needs re-certification against the 2022 standard rather than a simple gap assessment. Bitkosh's ISO 27001:2022 Implementation service covers the scope, risk assessment, Statement of Applicability, policy suite, internal audit, and certification body liaison that re-certification requires.

Yes, the Multi-Framework Crosswalk service maps overlapping controls across frameworks like ISO 27001, SOC 2, HIPAA, GDPR, and DPDP, so a single control you implement can satisfy several requirements at once. Instead of running each framework as its own separate project with duplicated work, you comply once against the shared control set and demonstrate it against each framework's own evidence requirements.

Yes, Dark Web & Brand Monitoring includes Take Down Services and Online Reputation Management alongside monitoring for leaked credentials and data. If your brand or executives are being impersonated or targeted, this capability sits within the same managed security offering rather than a separate one-off engagement, and runs as part of continuous monitoring rather than a single scan.

Email info@bitkoshtechnologies.com for both general enquiries and support requests. It's the same address whether you're a prospective client asking about a project or an existing client with a support question. If you'd rather talk in real time, phone and WhatsApp are available during business hours, or you can book a call directly from the contact page.

Yes, Application Security Testing is its own service line, separate from policy and governance work like ISO 27001 implementation. It sits alongside DevSecOps Pipeline Hardening and Secure Development Training under the secure development advisory practice, delivered by engineers who build software rather than consultants who only produce documentation, with findings that come back severity-rated like any other deliverable.