Pentesting and audit readiness for growing teams

Our story

CyberImmune was founded so growing technology teams could get pentesting and VAPT, and SOC 2 / ISO 27001 readiness, shaped for how they ship. A certified team delivers point-in-time testing and PTaaS with always-on AI-powered testing, along with Remediation as a Service (RaaS) and DeepScan by CyberImmune.

Toronto headquarters

CyberImmune Inc. is headquartered at 18 King St E, Suite 1400, Toronto, ON M5C 1C4—our North American hub for client partnerships and strategic delivery. We deliver across Canada, the United States, and India. This page does not list Houston or Bangalore offices.

Founder

Surya Mettupalli is Founder and CEO of CyberImmune Inc. He leads pentesting, SOC 2 / ISO 27001 readiness, AI and agentic security, and vCISO for Canadian and cross-border technology teams.

Team certifications

Our testers hold OSCP and CREST certifications. CyberImmune is a CREST Pathway Company. Technical workstreams use a CREST-aligned methodology with a certified team, not scanner-only output, across VAPT and AI security programs.

How we work

A certified team works through Scope, Validate, Remediate, and Prove. Human judgment stays with practical remediation and long-term relationships across pentesting, SOC 2 / ISO 27001 readiness, and advisory.

1. Scope

   Agree targets, assets, access handoff, and clear success criteria together.

2. Validate

   Test and review systems with exploit-validated evidence.

3. Remediate

   Guide engineering fixes with practical, prioritized remediation recommendations.

4. Prove

   Retest, report, and package evidence for buyers or auditors.

What we value

We value transparency, practical remediation, and long-term partnerships with the teams we support. Work aligns to international frameworks with local implementation for Canadian and cross-border technology companies. Integrity guides how we report findings and coordinate with independent auditors.