You build the business. Let’s strengthen what’s behind it.
Your email, personal accounts, product, and team access are connected. Start with a focused conversation about where you need help, then agree a practical security plan.
15-minute introductory discussion. Further work is scoped and quoted separately.
THE FOUNDER’S SECURITY PICTUREILLUSTRATION
You & your startupA connected set of priorities
Your accountsSign-ins · Recovery · Access
Your teamPeople · Tools · Permissions
Your productTesting · Findings · Fixes
Your responseOwners · Contacts · First steps
No account access or scans during the free review.
From Naresh Lamgade, founder of
Engagements are scoped with the relevant team.
BUILT AROUND YOUR ROLE
Different responsibilities. A focused starting point.
Choose the situation that sounds most like yours.
01
One compromised account can interrupt the whole business.
Start with the accounts and access that keep your company running, especially where your personal identity is also an administrator.
Company email and administrator accounts
Source code, cloud tools, and connected applications
A clear offboarding and first-response checklist
WHAT WE CAN DISCUSS
A plan you can understand. Work your team can act on.
These are areas to scope together. They are not an automatically included protection subscription.
01
Protect the accounts that run your business.
Email, social media, and cloud accounts often share recovery details or depend on a single administrator.
Explore the work +
Potential scope
Review sign-in protections, recovery options, active sessions, and administrator access with your account owner.
What you can expect
An account-hardening checklist with named owners.
02
Understand your personal exposure.
A public founder profile can reveal useful information about the person behind company accounts.
Explore the work +
Potential scope
Agree which email addresses, domains, and public profiles to review. Identify exposed information and explain the follow-up options.
What you can expect
A scoped exposure summary and prioritized next steps.
03
Keep team and app access under control.
Former contractors and unused integrations may retain access long after the original task is finished.
Explore the work +
Potential scope
Review the employee, contractor, and connected-app lists your administrator provides. Flag unnecessary access for the authorized owner to remove.
What you can expect
An access-review worksheet and offboarding actions.
04
Take product security beyond a questionnaire.
A self-assessment cannot tell you whether your website or application has exploitable weaknesses.
Explore the work +
Potential scope
Discuss an authorized VAPT or product security engagement with Cynical Technology or Bugv. Scope, pricing, testing rules, and deliverables are agreed separately.
What you can expect
A proposed testing scope. Findings and retesting depend on the agreed engagement.
05
Prepare for the first hour of an incident.
Lost account access or a suspicious payment request creates pressure to act before the facts are clear.
Explore the work +
Potential scope
Identify an internal response owner, the accounts to prioritize, and the people to contact. Document how to escalate a concern.
What you can expect
A first-response checklist. Incident support requires separate confirmation.
06
Review Microsoft 365 exposure.
Shared files, external access, and connected apps can become difficult to track as a team grows.
Explore the work +
Potential scope
If you use Microsoft 365, discuss whether a Vigile.AI assessment fits your tenant and requirements. Access and permissions are reviewed before any connection.
What you can expect
A suitability discussion and a separately agreed assessment or pilot scope.
HOW WE START
First, understand. Then, agree the work.
01
Bring your concerns.
Use the free assessment or request an introductory review. Tell us which accounts, tools, or business changes concern you.
02
Choose a clear scope.
Agree the systems, authorized owners, deliverables, fees, and timeline before any paid work or technical testing begins.
03
Make the next step concrete.
Use the agreed findings or checklist to assign fixes and decide whether further testing or ongoing support is useful.
STRAIGHT ANSWERS
Know what you’re asking for.
Is this an ongoing protection membership?
No membership is included with the free assessment or review. Recurring services, monitoring, support hours, and response expectations must be agreed separately in writing.
Will you need my passwords?
Do not submit passwords or recovery codes through the form. Any later technical engagement needs an agreed access method, scope, and authorization.
Can you help with personal or social accounts?
We can discuss account-hardening and exposure-review needs. Family devices, home networks, account recovery, and urgent incidents need a separate suitability and scope discussion. Recovery outcomes cannot be guaranteed.
How much does it cost?
The seven-question assessment and introductory 15-minute discussion are free. Further work is quoted after we understand the scope. No paid service starts from this form alone.
What if an incident is happening now?
This form is not an emergency response channel. Use your established incident process and contact the affected service through its official support route. For a possible engagement, email naresh@cynicaltechnology.com; availability must be confirmed.
A PRACTICAL PLACE TO START
One conversation. A clearer security priority.
Bring your questions. Leave the introductory discussion with a clearer view of what to check next.
12+ years in cybersecurityGoogle Vulnerability Research Grant recipientTEDx speaker
Naresh Lamgade is a Nepal-based cybersecurity entrepreneur and security researcher with over 12 years of hands-on cybersecurity experience. He founded Cynical Technology, Bugv, Vigile.AI, and Presage Labs, spanning offensive security, vulnerability disclosure, SaaS security, and AI security research.
A Google Vulnerability Research Grant recipient and TEDx speaker, Naresh previously served as a cybersecurity expert at Nepal’s Office of the Prime Minister and Council of Ministers. His work focuses on helping organizations understand security exposure and turn findings into practical action.
FOLLOW NARESH
Security insights, research, and the founder journey.