Core
Insurance
IRDAI cyber norms, 30-year policy confidentiality, DPDP
We secure insurers, we are not one. Your 30-year policy data outlives your current cryptography.
What's exposed in a insurance estate
30-year policy-data confidentiality
Records that must stay sealed for the life of the policy.
Claims-system attack surface
VAPT and TLS estate across claims and agent portals.
AI-generated claims fraud
Synthetic documents and deepfake claims at scale.
Your product set
Every product that applies here.
3 shipping now · 21 total
Open & Free
Dhiti Q-Day Scanner
Scan a domain, free.
Public, no-signup. Enter a domain and in ~40 seconds see every TLS endpoint, its cipher suites, key-exchange groups, certificate health, whether it offers hybrid PQC, and a Mosca countdown of the confidentiality you're losing today.
Dhiti CBOM CLI
cbom scan ./repo
Open-source CLI and GitHub Action. Apache-2.0, CycloneDX 1.6 output. Lives in the developer workflow long before sales ever calls.
Control Plane
Dhiti Command
One pane of quantum-safe control.
Executive posture dashboard and migration program tracking across repos, teams and business units, with RBAC and multi-tenant isolation plus region pinning at the schema level.
Dhiti Prajna
Your migration analyst, on tap.
Natural-language queries over your CBOM and findings, prioritised remediation, auto-drafted migration PRs, and generated compliance narratives, the model runs in-region.
Core Engines
Dhiti Discover
Know your exposure.
Scans code, configs, certificates, dependency manifests and infrastructure across 8+ languages; detects RSA/ECDH/ECDSA/DH; produces a risk-prioritised CycloneDX CBOM. You cannot migrate what you cannot see.
Dhiti Orchestrate
Route keys intelligently.
One policy-driven key-delivery API across PQC-hybrid, fiber QKD, satellite QKD and QRNG, with vendor-agnostic adapters and full lifecycle in the HSM with provenance. This is the Key Route made real.
Dhiti Comply
Prove it to the regulator.
Maps inventory and key usage to NIST IR 8547, CNSA 2.0, RBI, CERT-In, DPDP 2023, NIS2 and more; produces audit-ready evidence packs. The GRC module covers ISO, SOC 2, PCI and DPDP alongside the post-quantum frameworks.
Trust Layer
Dhiti Vault
Keys never leave hardware.
CloudHSM-backed key custody by handle only, generation, rotation, revocation, escrow, with an append-only audit replicated to object-locked storage and 20+ year long-lived key custody.
Dhiti Sentinel
Catch exposure the moment it ships.
CI/CD and GitHub Actions guardrails that block quantum-vulnerable code, detect crypto drift across releases, and export real-time alerts to your SIEM/SOAR.
Dhiti Certus
Every certificate, accounted for.
Certificate lifecycle management and PKI modernisation, discover every cert, alert on expiry and weak algorithms, automate renewal via ACME/CA, and prepare PQ-hybrid certificate readiness.
Dhiti Connect
Every system you run, aware.
The connector fabric, source, cloud, SIEM/SOAR, ITSM, key sources and PQC libraries all wired into one platform without rip-and-replace.
Cyber Resilience
Dhiti SOC
MDR on the tools you own.
AI-assisted managed detection and response on the tooling you already bought, Splunk, Sentinel, QRadar, CrowdStrike, SentinelOne, Defender. 24×7 from an India-based SOC. No rip-and-replace.
Dhiti Intel
A directive is a task, not a PDF.
Operational threat intelligence: brand monitoring and takedown, dark-web and credential-leak monitoring, sector-specific feeds, and standards/mandate tracking so a new CERT-In or RBI directive reaches you as a task.
Dhiti TPRM
Is my vendor PQC-ready?
Third-party and supply-chain risk: vendor questionnaires, continuous external posture scoring of your vendors, contract-clause tracking, and, uniquely, vendor cryptographic posture as a field, not a phone call.
Dhiti Quantify
Risk, in money.
Cyber risk quantification: FAIR-style loss modelling for classical risk, plus HNDL quantification, for each data class, the confidentiality years being lost today and the modelled cost. This is the screen that gets budget approved.
Dhiti Aware
Meet the attack in training first.
Workforce risk: phishing simulation with LLM-generated, sector-specific lures, role-based training paths, and executive briefings. Extends Dhiti Academy from skills to behaviour.
Intelligence & Services
Dhiti Labs
Know the threat before the mandate.
Quantum-threat intelligence: standards tracking (NIST/BSI/CNSA/RBI/CERT-In), advisories on algorithm and library weaknesses, the Dhiti Quantum Threat Index, and research notes that feed the blog.
Dhiti Assure
An assessment for the board.
Post-quantum readiness assessment, cryptographic architecture review, crypto-focused VAPT, and DAST/SAST/SCA, red/blue/purple teaming, board-ready findings and a costed migration plan.
Dhiti Managed
Run the migration with us.
Managed migration programme and co-managed crypto assurance: dedicated migration engineers, monthly posture reviews, drift triage, evidence-pack production, and a virtual crypto-CISO retainer.
Dhiti Academy
Teach the estate, not the tool.
Role-based training and certification: PQC fundamentals for engineers, crypto-agile design patterns, compliance workshops, executive briefings, and a public Dhiti Certified Quantum-Safe Engineer track.
Frameworks for this sector
Recommended edition
Professional
Connect for PricingRegulated mid-market, multi-repo, SSO/SAML
Migration sequence
- 01First 90 days90 daysdiscoverassure
- 02First year12 monthscomplycertustprm
- 03Multi-yearmulti-yearvaultorchestrate
Sector FAQ
- Do you sell insurance?
- No. Dhiti sells security and compliance to insurers and insurtechs. We secure the estate; we are not an insurer and never touch policies or claims.
- Where do we start in insurance?
- Every engagement starts with Discover, a crypto inventory and CBOM. You cannot migrate what you cannot see, and even at stage one you leave with a CBOM.
- Do you replace our existing tools?
- No. Dhiti runs on the SIEM, EDR and scanners you already own, and adds the cryptographic layer none of them cover.