Detect. Defend. Disrupt.

Security through

PIVOT is an offensive security team built for organisations that can’t afford to guess. We break in the way an adversary would, then hand you the map. Tradecraft first, theatre never.

ISO 27001:2022ISO 9001:2015ISO 22301:2019Startup India

Trusted by security-mature teams

50+ organisations. Continuous validation.

Retained where a single breach makes national news.

Offensive engagements across India's critical information infrastructure sectors — Defence, power, government, BFSI, and foreign banking. Sectors where intrusion is a national story and detection has no second chance.

Indian Army

Indian Army

CERSAI

CERSAI

Rajasthan Vidyut Prasaran Nigam

RVPN

Nikhil Srivastava
Nikhil Srivastava
Founder, CEO

The people who run the engagements.

“We test defences the way advanced adversaries test them, and we document what we find.”

OSCP — OffSec

OSCP

OffSec

Offensive Security

OSEP — OffSec

OSEP

OffSec

Experienced Pentest

CREST — CREST Intl.

CREST

CREST Intl.

Accredited Pentest

CEH — EC-Council

CEH

EC-Council

Ethical Hacker

CISM — ISACA

CISM

ISACA

Security Management

CISA — ISACA

CISA

ISACA

Audit & Assurance

CRTP — Altered Sec.

CRTP

Altered Sec.

Red Team Pro

eWPT — INE Security

eWPT

INE Security

Web App Pentest

We are a team of certified practitioners.

Offensive security,
the way adversaries do it.

AI & LLM Security Testing

We probe LLM-backed products for prompt injection, data leakage, and model abuse, then harden them against adversarial use so you can ship generative AI without inheriting its attack surface.

Explore

Red Teaming & Adversary Simulation

We emulate real threat actors with their TTPs and tooling, so your detection, response, and board confidence are tested against an actual adversary, not a checklist.

Explore

Digital Forensics & Incident Response

When a breach happens, speed and rigour both matter. Our DFIR team deploys within hours to preserve evidence, reconstruct timelines, and evict the threat.

Explore

Methodologies & standards

MITRE ATT&CKPTESOWASPTIBER-EUCBESTNIST SP 800-61ISO/IEC 27035SANS DFIR

AI & LLM security

Where traditional pentesting ends,
our LLM red team begins.

LLM applications break in ways your DAST and SAST tooling will never see. Prompt injection, model extraction, training data leakage, agent privilege abuse. We test them the way a motivated adversary would, and turn every finding into an eval your team can re-run on the next model update.

  • 01Red team engagements against production LLM stacks
  • 02OWASP LLM Top-10 + MITRE ATLAS aligned testing
  • 03Custom eval harnesses, re-runnable on model upgrades
Nikhil Srivastava presenting at Microsoft BlueHat Asia 2025

Microsoft BlueHat Asia 2025 · Nikhil Srivastava

Testimonials

Referenceable work across regulated industries.

Research

Original intelligence from
our research team.

Publications for CISOs, CIOs, and technical security practitioners. Distributed under enterprise classification and briefed to defender teams on request.

Mar 2026 · 28 pages

Global Ransomware Threat Intelligence Report

1,800+ incidents logged across sectors and geographies, with attribution and defender playbooks.

Read the report

Mar 2026 · 22 pages

Global Cyber Retaliation Report

80+ cyber incidents observed overnight during the latest escalation window, mapped to state aligned actors.

Read the report

17 Mar 2026 · 18 pages

Cyber Threat Intelligence Report

150+ confirmed incidents analysed with indicators, TTPs and priority detections for SOC teams.

Read the report