About
A cybersecurity startup built around manual testing
Secvapt is a cybersecurity startup focused on penetration testing and vulnerability assessment for teams who want to know what an attacker would actually find — not just what a scanner flags. We're based in Kathmandu, Nepal, and built Secvapt around the kind of engagement we wished we could buy ourselves.
Kathmandu
Headquartered in Nepal
OWASP
Aligned methodology
Direct
Access to testers, not a queue
Free
Retest after fixes ship
Why we started Secvapt
Most "penetration tests" on the market today are an automated scanner report with a company logo added to the cover page — technically a deliverable, but not something that would stop a real attacker. We'd seen that pattern too many times from the other side of the table, reviewing reports that missed access control flaws a human would have caught in minutes.
Secvapt exists to do the testing properly — manual-led, scoped honestly, and reported in a way your engineers can actually act on. What started as security work for a handful of early clients in Kathmandu has grown into engagements with teams well beyond Nepal.
Frequently asked questions
Common questions about Secvapt
Is Secvapt a Nepali company?
Yes. Secvapt is a cybersecurity startup founded and based in Kathmandu, Nepal, delivering penetration testing and vulnerability assessment services.
Do you only work with clients in Nepal?
No. While Secvapt is based in Nepal, we work with clients remotely wherever they're building from — testing and reporting don't require us to be on-site.
How is Secvapt different from a big compliance-focused firm?
Larger firms often optimize for throughput — junior testers running scans against a checklist. We're a small, hands-on team that leads with manual testing, which is slower per engagement but catches what a checklist-driven test misses.
What industries do you work with?
Mostly SaaS products, fintech, and e-commerce platforms — anything handling user data, payments, or authentication where a vulnerability has real consequences. If you're unsure whether we're a fit, just ask.
How can I reach the Secvapt team?
The fastest way is through the contact page or by emailing us directly. You'll hear back from someone on the testing team, not a sales queue.
Get started
Ready to see what an attacker would find?
Tell us what you're running and we'll scope a fixed-price engagement — usually within one business day.