Payatu

Payatu is a cybersecurity company based in India that provides security testing and research services. It is empanelled by CERT-In as an Information Security Auditing Organisation and holds ISO 17025 accreditation as a testing laboratory. The company offers penetration testing and vulnerability assessment across web, mobile, API, and cloud applications, as well as source code review and DevSecOps consulting. Beyond standard application testing, Payatu focuses on hardware and firmware security, including reverse engineering of IoT devices, and maintains EXPLIoT, an open-source IoT security testing framework. Additional service areas include automotive cybersecurity aligned with ISO/SAE 21434 and UN ECE R155/R156 standards, AI/ML security assessments including LLM testing and prompt injection evaluation, red team engagements simulating advanced persistent threat activity, and critical infrastructure assessments. Payatu's clients span industries including BFSI, fintech, healthcare, SaaS, telecom, and automotive, across more than 20 countries. The company has supported compliance and audit requirements under Indian regulatory frameworks such as CERT-In, RBI, SEBI, UIDAI, and DPDP. Payatu also founded the Hardwear.io and Nullcon security conferences. The company's staff regularly present research at security conferences including Black Hat, DEF CON, HITB, and BruCON, and have published CVEs across IoT, automotive, cloud, and AI/ML domains.