All guides
Managed cybersecurity service pricing for Indian MSMEs: what MSSP, MDR, SOC, EDR, vCISO and VAPT include, illustrative rupee costs, CERT-In and DPDP rules, SLA checks.
Managed Security Costs, Price Drivers and 2026 Rules
- CERT-In Directions 2022 for MSMEs: 6-hour reporting, 180-day logs, NTP and point of contact
What the CERT-In Directions of 28 April 2022 under IT Act section 70B(6) require from Indian businesses, what they cost to meet, and what to demand from a managed security provider.
- DPDP Act and IT Act for security buyers: safeguards, breach intimation and section 43A in 2026
What DPDP Act sections 8(5)–(6), the phased DPDP Rules 2025 and IT Act sections 43, 43A, 66 and 72A mean for buying managed security in India, as of October 2026.
- GST, TDS and dollar pricing on cybersecurity services: 18% GST, reverse charge, OIDAR and section 393
How 18% GST, reverse charge on imported services, OIDAR, TDS under section 393 of the Income-tax Act 2025 and exchange rates change the real cost of managed security in India.
- Managed cybersecurity service pricing in India: what drives the cost in 2026
How managed security services are priced for Indian MSMEs — endpoints, users, log volume, hours, response scope, contracts, GST — with illustrative rupee ranges and 2026 rules.
- Managed firewall and EDR pricing in India: hardware, subscriptions and monitoring
What managed firewall and managed EDR services cost Indian MSMEs — buy vs rent hardware, subscriptions, rule changes, agent licences and monitoring hours — with illustrative rupee sums.
- Managed security pricing models: per user, per endpoint, log volume, tiers and annual contracts
How Indian managed security providers price — per endpoint, per user, per GB of logs, tiers, bundles, annual and multi-year contracts — and how to convert quotes to compare them.
- MSSP vs MDR vs SOC-as-a-service: what each managed security service includes
Plain-English comparison of MSSP, MDR, SOC-as-a-service, managed EDR and firewall, vCISO and VAPT for Indian MSMEs — what is included, what is not, and how each is priced.
- VAPT cost in India: scope, test days and CERT-In empanelled auditors
How vulnerability assessment and penetration testing is priced in India — IPs, apps, test days, retests — when a CERT-In empanelled auditor is needed, and the 2025 audit policy guidelines.
- Virtual CISO cost in India: retainers, days per month and what a vCISO delivers
How virtual CISO (vCISO) services are priced for Indian MSMEs — monthly retainers, days, deliverables, audits and customer questionnaires — with illustrative rupee examples.
Cost Estimates, Best-Fit Selection and Checklists
- Best managed cybersecurity service for an Indian MSME: a best-fit selection method
A step-by-step method to choose the managed security provider that fits your business — risk profile, scope, weighted criteria, test questions and a scored shortlist — without relying on rankings.
- Cyber insurance for Indian MSMEs: what it covers and how managed security affects it
Basics of business cyber insurance in India — first-party and third-party cover, exclusions, proposal-form security questions, panels, and how MDR, MFA and backups affect cover and premium.
- Managed security cost for a 40-person services firm in India: a worked estimate
An illustrative 3-year managed cybersecurity budget for a 40-person Indian consulting or IT services firm on Microsoft 365 — MDR, email security, VAPT, vCISO, GST and options.
- Managed SOC cost for an Indian manufacturer with 180 endpoints and two plants: a worked estimate
An illustrative managed security budget for an Indian MSME manufacturer — MDR, SOC-as-a-service log volume, firewalls at two plants, OT network separation, VAPT and 3-year contract maths.
- In-house SOC vs managed SOC in India: build-or-buy cost and payback
What a 24×7 in-house security operations centre really costs an Indian MSME — staff rotation, tools, training, attrition — compared with a managed SOC or MDR, with a payback worked example.
- Incident-response retainer cost in India: hours, response times and what is included
How incident-response (IR) retainers are priced for Indian MSMEs — prepaid hours, response SLAs, forensics, rollover, travel and overlap with MDR and cyber insurance — with illustrative sums.
- Managed security RFP questions: 30 due-diligence questions for Indian MSMEs
The questions to send managed security, MDR and SOC providers before you sign — scope, analysts, response, logs and CERT-In, data protection, pricing, exit — with what a good answer looks like.
Failure Patterns, Contracts and Official Sources
- Hidden costs in managed security contracts: overages, uplifts, server rates and exit fees
The charges that make managed security cost more than the quote — log overages, server multipliers, minimums, true-ups, onboarding, retests, travel, FX and renewal uplift — with illustrative sums.
- Why managed security engagements fail for Indian MSMEs, and how to avoid it
The common patterns behind disappointing MSSP, MDR and SOC contracts — partial onboarding, alerts nobody reads, short log retention, weak SLAs, lock-in — and the fixes for each.
- MSSP and MDR SLA and contract terms: what to agree before you sign
The service levels and contract clauses that matter in Indian managed security deals — acknowledge, notify and contain times, service credits, liability caps, data, term, renewal and exit.
- Official sources for cybersecurity buyers in India: CERT-In, MeitY, e-Gazette, regulators and reporting portals
Where to check the CERT-In Directions, empanelled auditors, IT Act and DPDP texts, sector rules, GST and TDS, and where to report incidents and cyber crime in India, with what to look for on each.
- Penetration testing and the IT Act: written authorisation, scope letters and third-party systems
Why pen tests in India need written authorisation under IT Act sections 43 and 66, what a scope letter and rules of engagement should contain, and how to handle cloud, SaaS and hosting providers.
- Sector cyber rules in brief: RBI, SEBI CSCRF and IRDAI for regulated entities and their vendors
A short, hedged overview of RBI cyber, IT and outsourcing directions, SEBI's 2024 CSCRF and IRDAI guidelines, and what they mean for regulated entities and suppliers buying managed security.