Duvaxa

Security & Compliance · CERT-In compliance check

CERT-In Ready

CERT-In, checked properly.

Check your infrastructure against the CERT-In Directions as written: 180 days of logs held in India, synchronised time and incident reporting.

Indian SaaS and fintechsData centres and cloud usersIT services firms
certin
$ certin --help
→ CERT-In readiness report
→ Incident runbook
→ Log register
→ Fix list
What the product produces.
StandardCERT-In Directions 2022
ChecksRetention, location, NTP
AccessRead-only
OutputGap report

The problem

Generic scanners check that logging exists. CERT-In asks for 180 days, a copy in India and correct timestamps.

What it does

01

10 CERT-In checks on Terraform

02

Log retention, India region copy, flow logs and time sync

03

Readiness pack with the incident runbook and log register

04

Terraform fixes for each gap

05

CI mode that fails pull requests breaking retention

How it works

  1. Scan Terraform state or plan
  2. Review the CI001–CI010 results
  3. Apply fixes and file the readiness pack

Works with

AWSCloudWatchS3Terraform

Runs in your CI

GitHub Actions workflow step
- run: terraform show -json plan.out > plan.json
- run: certin-ready check plan.json --fail-on high
Licensed customers get the action or command-line tool installed in their own organisation; it runs on your runners, so your code and plans never leave them. The command-line tools run in GitLab CI the same way.

Your data

  • Read-only access to logging configuration.
  • No log content is read.
  • Findings stay with you.

Who it's for

Indian SaaS and fintechsData centres and cloud usersIT services firms

Questions

Why not a generic scanner?

Generic tools check that logging exists. CERT-In asks for 180 days, a copy in India and correct timestamps, and this checks exactly that.

Does it cover reporting?

Yes, including the six-hour incident reporting readiness.

Related

Often used with CERT-In Ready

See CERT-In Ready on your own data

A 30-minute call. We run the product on your export, repository or document and walk you through the results.

Book a demo