Mitigata

Mitigata operates a cyber resilience platform for Indian businesses that combines cybersecurity operations, regulatory compliance work and cyber insurance in a single offering. The company organises its services around four pillars — Detect, Comply, Insure and Respond — positioning itself as one accountable vendor in place of a fragmented set of point suppliers.

On the security side, Mitigata runs a 24x7 security operations centre covering endpoints, identities, cloud and network traffic, alongside attack surface monitoring, dark web and brand-abuse monitoring with takedown coordination, vulnerability assessment and penetration testing mapped to MITRE ATT&CK, red teaming, phishing simulations, and digital forensics and incident response. Deployed security tooling spans EDR, SIEM, firewall, email security and XDR. Compliance services map controls once across frameworks including India's DPDP Act 2023, ISO 27001, SOC 2, RBI and SEBI CSCRF requirements, with continuous evidence collection and gap assessment. On the insurance side, the company maps a client's security controls to underwriting requirements for cyber liability and D&O cover, and provides claims advocacy that coordinates forensics, insurer communication and documentation. A cyber risk quantification service translates control gaps into financial exposure, premium impact and remediation priority. A 24x7 incident hotline is advertised with a stated pod response time of under 90 seconds.

Business model

Mitigata sells an integrated stack that bundles managed security services, compliance readiness and brokered cyber insurance to business customers, acting as a single accountable partner rather than one of multiple specialist vendors.

Revenue is derived from providing bundled security operations, compliance and cyber insurance services to business clients, including insurance placement with carrier partners such as HDFC ERGO and Tata AIG and claims settlement support.

Traction

Company-reported figures include more than 50 threat analysts, over 1 million endpoints monitored, more than 13 insurance carrier partners, support for 25-plus compliance frameworks, a 4.2-minute mean time to detect, 3,336 alerts triaged in a 24-hour period and roughly 5,000 dark web and brand alerts per month. Case studies describe a Mumbai SEBI-regulated wealthtech platform reducing phishing incidents 92%, cutting response time from 12 hours to under 30 minutes and clearing a SEBI audit with zero findings, and a pan-India multi-specialty hospital chain avoiding ransomware incidents for 12 months and preventing a stated loss of about Rs 5 crore.

Latest developments

The website's news section announces a $15 million Series B round led by BVP, and highlights company commentary on Indian regulatory developments including DPDP enforcement rules and SEBI CSCRF audit cycles.