Frequently asked questions
What Offload Security is, how it's deployed, how pricing works, and how we handle your data — the questions buyers ask most. Still have one? Talk to us.
What is Offload Security?
A unified cybersecurity software platform (CNAPP, vulnerability management and compliance) covering cloud, code, containers, Kubernetes, applications and on-premises infrastructure. It normalizes findings from many scanners and tools into one data model, so you get one governed view of security and compliance instead of a dozen disconnected consoles and spreadsheets. Offload is developed and maintained by Advik Cyber Shield LLP.
Is Offload a product or a professional service?
Offload is a licensable cybersecurity software platform. Advik Cyber Shield LLP, which develops and supports the platform, also offers professional security services (such as assessments and penetration testing) as a separate business activity. You can license the platform without any services engagement; implementation help is available if you want it. See the Platform and Professional Services pages.
Can we host it ourselves, or is it SaaS?
Both. Most customers run Offload in their own environment, on-premises or in their own cloud account, so personal data, security findings and evidence never leave their control. Offload is also available as SaaS if you prefer not to run it yourself. On-prem is a common requirement for BFSI, healthcare, and other regulated organisations in India.
How does pricing work?
Offload uses a predictable platform-licence model — not per-developer, per-scanner, or cloud-spend pricing. Your price depends on deployment model (SaaS vs on-premises), environment scale, the modules you need, and support level. We're happy to share indicative packaging and scope a bounded pilot — talk to us for a quote.
Which clouds and scanners does it support?
AWS, GCP, and Azure for cloud posture, plus code, container, Kubernetes, and network scanning. Offload runs its own engines and ingests third-party tools you already use — e.g. Wazuh, SonarQube, Snyk, Trivy, and Grype — deduplicating their findings into one data layer. It also connects to a Greenbone/OpenVAS deployment for internal network scanning. See the docs for the full engine list.
How do you handle our source code and credentials?
Source-code scanning runs in ephemeral workspaces that are destroyed after the scan; only minimal excerpts needed for a finding are retained. Credentials are encrypted at rest, tenant isolation is enforced on every read and write, and we never train AI on your data. See the Trust Center for the full architecture.
How long does implementation take, and what does a pilot look like?
Most teams connect their first cloud accounts and repositories and see consolidated findings quickly. We also offer a bounded pilot with measurable success criteria — a scoped set of environments over a defined window — so you can validate value before a broader rollout.
Do you help with India's DPDP Act?
Yes. There's a dedicated DPDP module (breach-deadline tracking, DPIAs, Significant Data Fiduciary classification, vendor due diligence, readiness scoring, audit packs), and a free, no-signup DPDP Readiness Checker you can run in your browser today.
What support do you offer?
Platform support is part of your licence package, from self-serve use to guided implementation with the engineers who build the platform. Separate professional services are available if you want help running specific security or compliance workstreams.
Ready to see it on your environment?
Book a walkthrough, or start with the free DPDP Readiness Checker — no signup, runs in your browser.