What we offer

Dashboards/Insights01

Outcome Matters Pen Testing Does Not

Continuous and program modeled application security is designed for better and dynamic security controls.

How do you know if s/w surface is secure? With meaningful views, analytics & dashboards.

Is your appsec shifting left?

Do you data and views in your s/w security, which conclusively tells you that you are finding issues, vulnerabilities sooner.

Do you have a shift left board ?

Dev feedback loop data?

Unless your AppSec instills the secure code culture & builds secure coding practices, ROI cannot be guaranteed.

Do you have structured feedback?

Feature to vuln correlation?

AppSec coverage cannot be high quality unless cyclical tests are selective and prioritized well.

Is there a release to vuln mapping?

Less repeating vulnerabilities?

Unless you get lesser number of same vulnerabilities across releases, your appsec is not meaningful.

Is there a cross releases vuln tracking?

Issue triaging with context?

How do you allocate severity to a vulnerability, if complete context vulnerability data is absent.

Do you have a triaging board?

Risk exposure to web surface?

You can’t protect what you can’t see clearly. An enterprise class AppSec needs clear risk exposure to apps across-all enterprise.

Do you have a software risk board?

AppSec Vulnerability Board

Castellum maintains a real time access to its customer for all vulnerabilities identified across all of apps on single portal, along with remediation details.

See issues/vuln across all apps at one place

Understand the context, priority and severity

Check out the detailed analysis in a document

Correlate and cross relate vuln across s/w releases

Find hand over and dev status of vulns at one place

Allocate vulnerabilities to your sec team or dev teams

contact us

Dashboards & Reports for Deep Insights

Castellum’s AppSec delivers deep insights for our its customers. These insights are created by our platform, execution meta data and our frameworks. Insights enable transformative decisions for our customers, to improve security posture and ROI.

know more

CISO AppSec Boards

CISOs are often challenged with limited visibility and insight into across the enterprise state of software security. Castellum addresses this by providing a range of CISO dashboards right on the portal.

Security risk rating for all software

Enterprise risk from software attack surface

Movements & patterns of software risk exposures

know more

Powerful Insights for Application Security

These insight help you take decisions on automation, investments and DevSecOps adoption.

These insights are made possible by our platform

These analytics are enabled by our delivery framework

Continuous engagement model further powers insights

Enterprise actions on dev cycle, remediations & releases

Change after the fact correction to preemptive one

Move towards real time software security

Top
oh hello you
Award-winning
creative agency.
Delivering high-quality projects for international clients. Ask us about digital, branding and storytelling.

CONTACT ADDRESS
36 East 20th Street, 6th Floor

GENERAL INQUIRIES
borgholm@qodeinteractive.com

SOCIAL MEDIA

Privacy Policy

This Privacy Policy applies to the www.castellumlabs.com

Castellum Labs recognises the importance of maintaining your privacy. We value your privacy and appreciate your trust in us. This Policy describes how we treat user information we collect on http://www.castellumlabs.com and other offline sources. This Privacy Policy applies to current and former visitors to our website. By visiting and/or using our website, you agree to this Privacy Policy. Castellum Labs is a business unit of Raaga Technologies Private Limited and focuses on information technology and cyber security services and products.

Castellumlabs.com is brand and is a property of Raaga Technologies Private Limited, an Indian Company registered under the Companies Act, 2013 having its registered office at Workyard, 337, Phase 2, Industrial Area, Phase 1, Chandigarh, India - 160002.

Information we collect

Contact information. We might collect your name, email, mobile number, phone number, employer company, your designation, street, city, state, pin-code, country and IP address.

Payment and billing information. We do not conduct any online transaction and do not ask our website users for any kind of financial or payment information on our website.

Information you post. We collect information you post in a public space on our website or on a third-party social media site or asset or page or account or wall belonging to Castellum Labs.

Demographic information. We may collect demographic information about you or any other information provided by your during the use of our website with your consent and your approval. We might collect this as a part of a survey also.

We collect information in different ways.

We collect information directly from you. We collect information directly from you when you fill a query form or else when you drop a message to our number of else when you call our phone numbers. We also collect information if you post a comment on our websites or ask us a question through phone or email.

We collect information from you passively. We may use tracking tools like Google Analytics, Google Webmaster, browser cookies and web beacons for collecting information about your usage of our website and any associate web sites of ours.

We get information about you from third parties. For example, if you use an integrated social media feature on our websites. The third-party social media site will give us certain information about you. This could include your name and email address.

Use of your personal information

We use information to contact you: We might use the information you provide to contact you for confirmation of the answers for your queries posted on our website.

We use information to respond to your requests or questions. We might use your information to confirm your registration for a webinar or an event or a course published by us.

We use information to improve our products and services. We might use your information to customize your experience with us. This could include displaying content based upon your preferences.

We use information to look at site trends and customer interests. We may use your information to make our website and products better. We may combine information we get from you with information about you we get from third parties.

We use information for security purposes. We may use information to protect our company, our customers, our websites or our other digital assets on internet.

We use information for marketing purposes. We might send you information about special promotions or offers. We might also tell you about new services, features, products, reports or other offerings. These might be our own offers or products, or third-party offers or products we think you might find interesting. Or, for example, if you submit a query, we might enroll you for our newsletter with your consent.

We use information to send you transactional communications. We might send you emails or SMS about your account, registration or a query submitted by you.

We use information as otherwise permitted by law.

Sharing of information with third-parties

We might share information with third parties who perform services on our behalf. We share information with vendors who help us manage our online registration process or query processors or transactional message processors. Some vendors may be located outside of India.

We will share information with our business partners. This includes a third party who provide or sponsor an event, or who operates a venue where we hold events. Our partners use the information we give them as described in their privacy policies.

We may share information if we think we have to in order to comply with the law or to protect ourselves. We will share information to respond to a court order or subpoena. We may also share it if a government agency or investigatory body requests. Or, we might also share information when we are investigating potential fraud.

We may share information with any successor to all or part of our business. For example, if part of our business is sold we may give our customer list as part of that transaction.

We may share your information for reasons not described in this policy. We will tell you before we do this.

Email Opt-Out

You can opt out of receiving our marketing emails. To stop receiving our promotional emails, please email unsubscriber@castellumlabs.com. It may take about ten days to process your request. Even if you opt out of getting marketing messages, we will still be sending you transactional messages through email and SMS about your queries.

Third party sites

If you click on one of the links to third party websites, you may be taken to websites we do not control. This policy does not apply to the privacy practices of those websites. Read the privacy policy of other websites carefully. We are not responsible for these third-party sites.

Grievance Officer

In accordance with Information Technology Act 2000 and rules made there under, the name and contact details of the Grievance Officer are provided below:

Mrs. Rinky (Sukriti) Shukla

Workyard, 337, Phase 2,
Industrial Area, Phase 1,
Chandigarh, India - 160002

Phone: +91 - 86399 53505
Email: sukriti.shukla@castellumlabs.com

If you have any questions about this Policy or other privacy concerns, you can also email us at privacy@castellumlabs.com

Updates to this policy

This Privacy Policy was last updated on 20.12.2025. From time to time we may change our privacy practices. We will notify you of any material changes to this policy as required by law. We will also post an updated copy on our website. Please check our site periodically for updates.

Jurisdiction

If you choose to visit the website, your visit and any dispute over privacy is subject to this Policy and the website's terms of use. In addition to the foregoing, any disputes arising under this Policy shall be governed by the laws of India.

Annual Summary Report

Please provide your details to access the report.