shubhamchaskar.com

What It Is

Shubham Chaskar’s website presents the service page of an individual cybersecurity expert/freelance consultant from India. The core focus areas include penetration testing, red team exercises, secure code review, cloud security, Active Directory security, threat modeling, and AI/ML pentesting. The page lists certifications such as OSCP, CRTE, and CRTO, along with relevant work experience at SecureLogic, ArisGlobal, Funding Societies, Cobalt, and others. Overall, it is positioned more as offensive security assessment services than as a traditional security product.

Core Capabilities and Deliverables

In terms of protection coverage, the service spans common attack surfaces such as web, mobile apps, APIs, infrastructure, and AD. The penetration testing service emphasizes simulating attacker techniques, delivering risk-prioritized reports, and including free retesting. Red team exercises focus on realistic attack scenarios to test technical defenses, detection and response, and people/process readiness. Secure code review centers on line-by-line code analysis to identify logic flaws and insecure practices, with developer-friendly remediation guidance. As for delivery model, the site does not specify SaaS, a tooling platform, or on-site engagement; it appears more like a remote consulting service delivered on a per-project basis.

Pricing and Suitable Use Cases

Public pricing is listed as USD 2000 for Pentesting, USD 10000 for Red Teaming, and USD 3000 for Secure Code Review, with a mention of savings of up to 50%. However, it does not provide clear scope boundaries, asset counts, testing duration, out-of-scope fees, or payment methods. The pricing looks straightforward, but before procurement, buyers should still confirm the SOW, sample reports, data confidentiality terms, number of retests, and delivery timeline. It is best suited for startups, product teams, SMEs, or organizations that need third-party targeted offensive security validation with clearly defined testing goals.

Pros and Cons

The strengths are a focused service offering, reasonably complete offensive security experience, and personal certification information. The stated deliverables for penetration testing and red team exercises are also clear, covering vulnerability discovery, detection/response validation, and remediation recommendations. The drawbacks are that the website lacks organization-level compliance certifications such as ISO 27001 or SOC 2; it does not disclose SLA, contract, payment, privacy, or data processing terms; and the customer feedback lacks verifiable case links. For financial, healthcare, or large enterprise buyers, the available compliance and vendor onboarding materials may be insufficient.

Access from China and Alternatives

Access from mainland China cannot be determined based on the page content alone, so it should be marked as unknown. Payment methods are also not disclosed, so cross-border payment, contracts, and tax matters may need to be discussed by email. If a company needs localized delivery, Chinese-language reports, MLPS compliance, or on-site support, it may compare domestic vendors such as Qi An Xin, Venustech, NSFOCUS, and Chaitin Tech. For international bug bounty and penetration testing platforms, Cobalt, HackerOne, Bugcrowd, and Synack are relevant alternatives.