Huntress Acquires Inside Agent: A New Era for Identity ProtectionFree Trial
Menu
InvestorsCareersBlogAboutAcademySupportContact
LoginSign up

About Us

Home > About Us

Spakto Cyber Labs

Offensive Security, Engineered with Precision | Defending What Matters Most

ELITE OFFENSIVE SECURITY · PENETRATION TESTING · RED TEAM OPERATIONS

Spakto Cyber Labs is a specialist offensive security and penetration testing firm headquartered in Kolkata, India with operations spanning the EU and Asia-Pacific. We exist for one purpose: to find and exploit security weaknesses in our clients' infrastructure before real-world adversaries do. Our engagements simulate the tactics, techniques, and procedures (TTPs) of advanced persistent threats, giving organisations a ground-truth view of their risk posture.

Our assessment team comprises OSCP, OSCE, and CRTP certified security engineers with deep expertise across network penetration testing, web and mobile application security, cloud infrastructure (AWS, Azure, GCP), Active Directory attack paths, and red team operations. Every engagement is backed by original research — from zero-day discovery and custom exploit development to proprietary tooling that goes beyond off-the-shelf scanners. We operate with full-scope rules of engagement, delivering actionable intelligence that security teams can act on immediately.

Spakto is also at the forefront of AI-augmented security. We integrate large language models into our reconnaissance workflows, leverage RAG-based knowledge bases for rapid threat correlation, and develop AI-assisted fuzzing and exploit generation pipelines. This allows us to operate at a speed and depth that traditional consultancies cannot match — identifying complex attack chains across hybrid environments in a fraction of the time.

Spakto Security Operations

By the Numbers

Impact That Speaks for Itself

Real results from real engagements — no inflated metrics, just verified outcomes from our offensive security operations.

02

Operating Countries

15

Security Professionals

200+

Engagements Delivered

1,400+

Critical Vulns Found

Our security journey

Born in 2026 with one obsession — stay ahead of every adversary. We built Spakto to close the gap between theoretical security and real attack readiness. Every tool, every engagement, every line of research moves that mission forward.

2026 Q1
2026 Q2
2026 Q3
2027+

Day Zero — Spakto Founded

Spakto Cyber Labs incorporated with a singular mandate: build the most capable offensive security platform for enterprises. Core team assembled — all veterans of red team operations, adversary simulation, and critical infrastructure defence.

BAS Platform Goes Live

Launched Spakto's full Breach & Attack Simulation (BAS) toolset — continuous, automated adversary emulation mapped to MITRE ATT&CK. Enterprises can now validate their defences against real attack chains 24/7, not just once a year.

First Enterprise Clients

Onboarded our first enterprise clients across BFSI and critical infrastructure. Delivered full-scope red team operations, uncovering critical attack paths that had evaded existing controls for years.

The Standard — Global Expansion

Scaling across EU, Asia-Pacific, and the Middle East. Expanding our platform with AI-augmented threat correlation, managed red team services, and the ambition to set the global benchmark for attack-ready enterprises.

Certifications & Compliance

Industry-Recognised Standards

Our delivery processes are aligned with ISO 27001 and SOC 2 Type II standards, ensuring every engagement meets the highest security and compliance benchmarks.

OSCP
OSCE
CRTP
CEH
CREST CRT
ISO 27001
SOC 2 Type II
PTES
OSCP
Offensive Security
ISO 27001
Information Security
OSCE
Expert Level
SOC 2
Type II
CEH
Certified
CRTP
Red Team
CREST
CRT
PTES
Standard
NIST
Framework
GPEN
CISSP

How We Work

Our Engagement Methodology

A proven five-phase approach that delivers actionable results from day one.

STEP 01

Scoping

Define attack surface, objectives, threat model & rules of engagement with stakeholders.

STEP 02

Reconnaissance

AI-augmented OSINT, target enumeration, attack surface mapping & infrastructure fingerprinting.

STEP 03

Exploitation

Manual penetration testing, custom exploit development & complex multi-step attack chain discovery.

STEP 04

Reporting

Detailed findings with CVSS scoring, business-impact prioritisation & executive summary.

STEP 05

Remediation

Hands-on guidance, verification retesting & ongoing advisory support for your security team.

Stay Informed

News & Upcoming Events

Latest Updates

See all updates

Upcoming Events

See all events
Technology Partners

Trusted by Leading Organisations Worldwide

We collaborate with top-tier technology vendors and enterprises to deliver comprehensive security assessments.

VisaIBMCiscoNASASamsungGoogleSpotifyVisaIBMCiscoNASASamsungGoogleSpotify
VisaIBMCiscoNASASamsungGoogleSpotifyVisaIBMCiscoNASASamsungGoogleSpotify

Transforming Vision into Impact

+200security engagements

delivered since 2026

+1,400critical vulnerabilities

discovered and disclosed

+50Min client assets

protected across sectors

15security professionals

across 02 countries

#1offensive security firm

in Eastern India

Our Global Reach

Beyond India, Spakto operates across the EU and Asia-Pacific — helping enterprises in financial services, critical infrastructure, and government understand their true exposure. International clients tap into our offensive research capabilities and AI-augmented tooling to gain an attacker's perspective on their most critical systems.

Meet the team behind
Spakto Cyber Labs

We hire exceptional security minds
and give them the autonomy, tools, and challenges
to do career-defining work.

Chandan Mondal

Chandan Mondal

Founder & CEO

Former Red Team lead at Wipro and Ciklum. OSCP-certified offensive security engineer with 8+ years in penetration testing and adversary simulation.

Srijon Marjit

Srijon Marjit

Lead Software Engineer

Full-stack engineer specialising in secure application development, DevSecOps pipelines, and internal security tooling.

Amélie Laurent

Amélie Laurent

Head of Product & Design

Leads client-facing product design and security dashboard UX. Brings 10+ years of experience crafting enterprise SaaS interfaces.

Riley O'Moore

Riley O'Moore

Senior Security Researcher

Specialises in cloud infrastructure exploitation, Active Directory attack paths, and zero-day vulnerability research.

Our Values

THE HEART OF SPAKTO CULTURE

Our core values drive every engagement, every line of code, and every vulnerability we uncover.

One Team

We rely on each other

Security is a team discipline. We break down silos between offensive researchers, engineers, and analysts — fostering transparency, knowledge sharing, and collective ownership of every engagement.

Care Deeply

We create positive change

We lead with empathy for our clients, their end-users, and the broader security community. Every vulnerability we report helps protect real people — and we never lose sight of that responsibility.

Customer Centric

We drive business impact

Every finding we deliver is prioritised by real-world exploitability, not theoretical risk scores. We translate technical vulnerabilities into business language so leadership can make informed, confident decisions.

Forward Thinking

We shape the future

We invest heavily in R&D — from AI-augmented reconnaissance to custom exploit frameworks. Staying ahead of adversaries means constantly evolving our tools, techniques, and thinking.

Global Delivery Model

Operations across 02 countries
On-demand and retainer engagement models
200+ successful engagements delivered
24/7 coverage with follow-the-sun delivery