Expert-Driven VAPT · Since 2018 · 4 Continents
Find Your Vulnerabilities
Before Attackers Do.
Human-led penetration testing for enterprises that cannot afford to get business logic or transaction security wrong. 7+ years. 50+ enterprise clients. 500+ projects.
Why Simuna
Where automated scanners fail,
our experts think like attackers.
Expert-Led, Not Tool-Led
Every engagement is led by certified offensive security experts averaging 13 years of VAPT experience. We manually exploit the business-logic flaws that bots are fundamentally blind to.
Trusted Enough to Be Referred
A significant share of our work comes through long-term strategic partners who repeatedly bring us into their own engagements — the clearest signal of earned trust.
Two Rounds, Not One
Every engagement includes an initial 16-step audit and a full verification round after remediation. We re-test from scratch to confirm fixes hold and no regressions were introduced.
Services
7 core services. One relentless standard.
Web Application VAPT
Business-logic exploitation, API abuse, and OWASP Top 10 testing for complex web platforms.
Learn moreMobile Application VAPT
iOS & Android security for fintech, mobile wallet, and OTT app architectures.
Learn moreNetwork Penetration Testing
Internal and external threat modeling across your corporate environment.
Learn moreCloud Security Assessment
IAM, configuration, and attack-path analysis across AWS, Azure & GCP.
Learn moreAPI Security Testing
REST, GraphQL & SOAP testing tailored for BSS and payment gateways.
Learn moreRed Team Assessment
Full adversary simulation targeting people, processes, and applications.
Learn moreAI / LLM VAPT
Security testing for AI applications, large language models, and generative AI systems — OWASP Top 10 for LLMs.
Learn moreRecognition
Credentials that speak for themselves.
Approved for 80-IAC tax exemption by India's Inter-Ministerial Board (DPIIT)
CES 2024 — U.S. Department of Commerce Foreign Delegate List
Winner — Startup India–WhatsApp Ad Credits Challenge
Backed by MACH37 & Startup Karnataka accelerators
Selected for CySecK H.A.C.K (Govt. of Karnataka / IISc Bangalore)
Our security researchers individually acknowledged by Google, Microsoft & Oracle for responsible disclosure
Member — Virginia Cyber Security Partnership (VCSP), a US public-private cybersecurity community
Leadership
Built by practitioners, not theorists.
Arun George
Founder & CEO
Eight years in cybersecurity across APAC, the Middle East, and Europe. Arun has personally led VAPT engagements for Tier-1 telecom operators, Fortune 500 manufacturers, and major banking institutions. B.Tech, Cochin University of Science and Technology.
Charlotte Christensen
Co-Founder & COO
Based in Luxembourg at the heart of Europe's financial ecosystem. Executive Director of Fintocat. Deep cross-border business development across Nordic and EU markets. Bridges technical excellence with enterprise and financial-sector buyers globally.
Industries
Deep expertise across high-stakes verticals.
Telecom & Digital Platforms
We've secured the digital ecosystems of Tier-1 telecom operators across 7+ countries — from BSS and campaign management ...
ExploreManufacturing & Automotive
We secure the enterprise IT applications of global automotive and precision-technology manufacturers across multiple geo...
ExploreBanking & Financial Services
From major banks in the UAE and Mauritius to fintech platforms and payment wallets across Asia and the Middle East, we s...
ExploreMethodology
16 steps. 4 phases. Zero shortcuts.
A rigorous, human-led methodology refined over 500+ engagements — from Application Familiarization to Report Submission.
Phase 1 — Context & Reconnaissance
Phase 2 — Structural Probing & Filtering
Phase 3 — Human-Led Deep-Dive
Phase 4 — Exploitation, Validation & Governance
Case Studies
Results across 4 continents.
A global precision-technology manufacturer
Japan, Singapore, Australia, Hong Kong, Thailand & India
E-commerce, payment wallets, reseller portals, dealer portals, mobile apps, insurance portals, backoffice systems
A major automotive manufacturer
Philippines
Dealer platforms, customer portals, mobile applications
Tier-1 telecom operators
Malaysia, Singapore, Indonesia
BSS, mobile wallets, campaign management, revenue assurance
A multinational software company
Vietnam, Singapore & Japan
Multi-product application security across geographies
Major banks
UAE, Mauritius
Core banking, payment APIs, transaction integrity
Multiple e-commerce & payment platforms
APAC & Middle East
Payment flow integrity, transaction security, wallet testing
A government-backed smart-city initiative
Qatar / Middle East
Smart-city platform security assessment
A fintech company
Saudi Arabia
Payment platform and financial application security
Ready to find your vulnerabilities —
before attackers do?
Schedule an enterprise scoping consultation. Our experts will review your environment and identify your highest-priority security risks.