Main Object Clauses

  1. To carry on the business of providing cybersecurity services, including vulnerability assessment and penetration testing, security audits, network security monitoring, incident response, digital forensics, malware analysis and managed security operations centre (SOC) services.
  2. To develop, license and deal in cybersecurity software and hardware products, including firewalls, intrusion detection and prevention systems, endpoint protection tools, encryption solutions, identity and access management platforms and security information and event management (SIEM) systems.
  3. To provide consultancy, training and certification services in information security, data protection and privacy compliance, including Data Protection Officer (DPO) services, privacy impact assessments and compliance audits under the Digital Personal Data Protection Act, 2023 and other applicable laws.
  4. To carry on the business of ethical hacking, red-teaming, security research and responsible disclosure programmes, and to advise governments, businesses and institutions on cyber policy, risk management and security architecture.

NIC Code: 62 — Computer programming, consultancy and related activities

Related Licences & Registrations

  • CERT-In Empanelment: Required to conduct government-mandated information security audits — a major revenue channel for security firms.
  • ISO 27001 Certification: Expected by enterprise clients before they trust you with their infrastructure.
  • DPIIT Startup Recognition: Cybersecurity is a priority sector; recognition helps with government tenders.
  • Professional Certifications (CEH, CISSP, CISA): Not company licences, but clients ask for them — factor team certification into your hiring plan.

ROC Filing Notes

  • MCA has no issue with cybersecurity objects, but phrase penetration testing as “authorised security testing” — the word “hacking”, even with “ethical” before it, occasionally draws an examiner’s query.
  • If you will handle government contracts, keep a separate clause for “security consultancy to government bodies” — it helps during empanelment applications that ask for object-clause evidence.
  • Data protection consultancy is a distinct and growing line; name the DPDP Act-era services explicitly so the objects support DPO-service contracts without stretching.