About us
Kavach is a software product (SaaS) that audits websites and application source code for security weaknesses and tells the owner, in plain English, what to fix. It is built and operated by Support IT Ventures, a small product company in Mumbai, Maharashtra, India.
What Kavach does
Three things, all read-only. A live-site audit looks at a website the way an attacker would (headers, TLS, cookies, email identity, third-party scripts, exposed files) and grades it. A Code Scan analyses an uploaded archive of source code for the mistakes that cause breaches: string-built SQL, shell commands with user input, unescaped output, credentials in source, wide-open CORS and the like. Monitoring re-checks a verified domain on a schedule and alerts the owner when a deploy opens something up. Nothing is attacked, nothing is taken down, and nothing is scanned without the owner's attestation.
Who it is for
Founders who shipped an app with an AI assistant and want to know if it is actually secure, developers and agencies who need a fix list rather than a lecture, and businesses that need evidence (reports, a public Trust Passport, a CI gate) that their site is looked after. Plans are priced in Indian rupees for India and in US dollars internationally; the Free plan needs no card.
How we are funded
By customers. There is no venture funding and no growth target set by an investor. We grow slowly, we are not going to be acquired and shut down next year, and we are not going to raise prices three times to hit somebody else's plan.
What we will not do
- Attack, load-test or probe anything beyond read-only checks of what the public internet can already see.
- Keep uploaded source code: Code Scan archives are deleted the moment the analysis ends.
- Sell, rent or mine your data, or put an advertising script on a page where you work.
- Make you email someone to cancel, or hide the cancel button behind a retention flow.
- Claim a certification we do not hold, or call a grade a guarantee. Kavach reports observations; see the Disclaimer.
How we build
Server-rendered pages, standard-library code, no JavaScript framework and no third-party scripts on any page. Kavach serves the same security headers it grades others on, and it scans itself before every release. Our security and responsible-disclosure page explains how we handle reports.
Part of Support IT Ventures
Kavach is one of a family of software products built by the same team in India: DocNimble.com · ImgNimble.com · TXTNimble.com · ReconNimble.com · SupportCentral.in · IFSCpin.in · SupportIT.in · ZipCodeGlobe.com. They share an operator, a billing provider, the same refund and cancellation rules, and the same stance on data.
Legal identity
Operator: Support IT Ventures, Mumbai, Maharashtra, India. Governing law: India; courts of Mumbai. Documents: Terms of Service, Privacy Policy, Refund & Cancellation Policy, Acceptable Use, Disclaimer. Contact details are on the contact page.