Skip to content
Contact Us
AI · Accounting
Caelum AI — Document Processing

99% · Extraction accuracy

→
Flagship · GovTech
India Post — grievance system

Pan-India, awarded via GeM (Nov 2025).

Read →
Flagship · GovTech
India Post — grievance system

Pan-India, awarded via GeM (Nov 2025).

Read →
Global delivery
India · Belgium · UK

Three offices, three time zones.

→

Cybersecurity for applications, cloud and infrastructure.

Mindrops secures applications, cloud and infrastructure end to end — assessments, secure SDLC, identity, cloud hardening and monitoring — so risk is managed before it becomes an incident.

Clients

  • Unilever
  • Cushman & Wakefield
  • The Coffee Bean & Tea Leaf
  • World Food Programme
  • UNDP India
  • Anton Paar
  • Belgo-Indian Chamber of Commerce & Industry
  • Unilever
  • Anton Paar
  • Cushman & Wakefield
  • World Food Programme
  • UNDP India
  • Hero MotoCorp
  • Unilever
  • DLF
  • India Post
  • Barbeque Nation
  • The Coffee Bean & Tea Leaf

Specialist security services

Start with the risk in front of you — proving exposure, redesigning access, preparing cryptography or evidencing compliance — and combine services as the programme matures.

Selected projects

Projects in this area, followed by work for well-known clients.

Business Association · Website & Membership

BICC&I — Website & Member Platform

A WordPress website with a custom theme, membership management, event list management, a Mailchimp integration and an integrated payment gateway.

Mindrops manages the live site end to end: server management, updates and security.

Total post offices1,65,000The largest postal network in the world

Government · GovTech

India Post — Grievance Redressal

An AI-automated platform on Mindrops’ LazyMonkey foundation that categorises, prioritises, routes and auto-responds to every grievance, with one SLA-tracked record for central and regional teams.

Awarded via GeM (Nov 2025), it auto-triages thousands of grievances a day for a network of 1.5 lakh+ post offices.

Cafés in India50+outlets across India, served by the systems we builtBrewing since 1963

AI · Food & Beverage

BeanBot — The Coffee Bean & Tea Leaf

An embeddable AI chat assistant grounded in live catalogue and store data, with an “Order Now” action on every product and a no-code admin console for content and pricing.

Live across 50+ outlets in India, handling about 10,000 conversations a month and around 50 orders a day.

Families sharing meals and everyday moments on sunlit terraces, beneath an illustrated Unilever logo
Everyday reach3.4bnpeople use Unilever products every day190+ countries where its brands are sold

Consumer goods · Applied AI + mobile

AI loyalty programme app for Unilever

For Unilever, we built a mobile loyalty programme with applied AI at its core, turning everyday purchases into a direct and continuing relationship between the brand and its consumers.

Loyalty programme · Applied AI · Mobile app

Global reach170countries and territories where UNDP worksUnited Nations Development Programme

UNDP India

A learning management system for UNDP India, bringing our learning-platform engineering to an international development institution.

IoT · Instruments

Easydens by Anton Paar

Mindrops chose right-fit tooling, fast-tracked development, tested across iOS and Android devices and supported App Store submission, then post-launch monitoring.

Shipped on time across iPhone, iPad and Android, to the satisfaction of Anton Paar’s Easydens team.

Restaurants230In 86 cities across 5 countriesListed on NSE and BSE

Enterprise · Food & Beverage

Barbeque Nation — Partner Portal

An ERP-integrated partner portal unifying vendor onboarding with GST, PAN, FSSAI and MSME checks, multi-stakeholder approvals, contract lifecycle management and a live vendor ledger.

Vendor, contract and finance operations digitized at scale in one dual portal for internal teams and vendors, with the ERP kept as the system of record.

See all case studies

Cybersecurity services

Security assessments

Application, cloud and infrastructure assessments that find real risk and prioritise what to fix.

Secure SDLC & DevSecOps

Threat modelling, code review, SAST/DAST, dependency and secrets scanning built into the CI/CD pipeline.

Cloud security

Hardening, configuration and posture management across AWS, Azure and GCP.

Identity & access

SSO, MFA and least-privilege access control across applications and infrastructure.

Remediation & hardening

Engineers who fix what assessments find — code changes, configuration, patching and retesting.

Monitoring & response

Logging, detection, audit trails and incident-response runbooks so threats are detected and contained.

Why Mindrops for cybersecurity

Engineers who build and run software
Mindrops engineers write and operate production software, so findings arrive with fixes your developers can apply — or that we apply with them.
Controls designed in from day one
The India Post grievance platform runs on SAML single sign-on, role-based access control and a full audit trail, all designed into the system from the start.
CMMI Level 3 delivery processes
Delivery runs under CMMI Level 3 processes and a secure SDLC aligned to OWASP, and Mindrops is a GeM-verified seller for public-sector buyers.
Prioritised by real risk
Findings are ranked by exploitability and business impact, so a limited budget goes to the weaknesses an attacker would actually use first.
Technologies we use
Application
Threat modelling · SAST / DAST · Dependency scanning · Secrets scanning
Cloud & infra
AWS · Azure · GCP · Posture management
Identity
SSO · MFA · JWT · Least privilege
Standards
OWASP · NIST · GDPR

Client reviews

Reviews of other Mindrops projects; each names the project it is about.

Warehouse operations platform

A field app and web admin panel connecting material records, site expenses and reporting across warehouse locations.

From the client’s review

“Reporting that used to take a full day of compiling sheets is now a filtered download from the admin panel.”
Amit AgarwalDirector, Footprint WarehousingRead full review on Clutch

AI invoice extraction

Vendor invoices are read and extracted automatically, stored, and passed to the accounting tools the finance team already uses.

From the client’s review

“The AI extraction they built works reliably with different invoice formats which was the main thing we needed.”
Keshpal YadavEmployee, VRV Hospitality Private LimitedRead full review on Sortlist

Ordering platform for a retail chain

A website and mobile app for a 70-outlet meat retail chain in Delhi NCR, on a backend built for high order volume.

From the client’s review

“The admin dashboard was the standout, putting inventory, pricing, and promotions across all 70 outlets in the hands of non-technical staff.”
Karan SahniDirector, Sardar Meat ShopRead full review on Sortlist

AI vehicle monitoring

Computer vision at a mine gate records number plates, vehicle movements and trip counts for daily reporting.

From the client’s review

“Daily reports are ready on their own, so nobody has to sit and prepare them at the end of the shift.”
Ashok Kumar SinghOwner, M/s Mineshaft Traders & ConsultantRead full review on DesignRush

Fintech lending platform

A customer app, vendor app and admin panel from one team, with KYC, CIBIL credit checks and automated loan approvals.

From the client’s review

“Fintech projects have a lot of layers and it was good to work with a team that understood the credit and lending side of things.”
Shyam AryaDirector, Insto Fin Private LimitedRead full review on Sortlist
See all reviews

Certifications and partnerships behind this work

ISO 27001

Your data, code and credentials are handled under an audited information security management system.

CMMI Level 3

Your project follows the same defined process for requirements, reviews, testing and risk, whichever team runs it.

How a security engagement runs

  1. 01 — Scope

    Scope and threat model

    Agree the systems, data and threats that matter, the rules of engagement and what a successful outcome looks like.

  2. 02 — Assess

    Assess and test

    Review architecture, code, cloud configuration and identity, and test with manual and automated techniques.

  3. 03 — Remediate

    Fix in priority order

    Deliver a risk-ranked remediation plan and, where you want it, implement the fixes alongside your team.

  4. 04 — Sustain

    Retest and monitor

    Retest to confirm fixes, then keep controls effective with monitoring, pipeline checks and periodic reassessment.

Frequently asked questions

Talk to our team

Message, call or email us about your project. We'll go through your objectives, suggest the most cost-effective approach and give you a rough timeline and cost.

Reach out today. We'll get back to you as quickly as possible.

What cybersecurity services does Mindrops offer?
Mindrops offers security assessments, secure SDLC, cloud security, identity and access management, penetration testing and VAPT, zero-trust architecture, post-quantum readiness, and governance, risk & compliance — across applications, cloud and infrastructure.
How do I choose between VAPT, zero-trust, quantum-safe and GRC?
Match the service to the question you need answered. VAPT shows what an attacker could exploit today; zero-trust architecture limits how far a breach can spread; quantum-safe security protects long-lived data from future decryption; and governance, risk & compliance turns controls into audit-ready evidence. Many programmes start with an assessment or VAPT and use the findings to sequence the rest.
What does a cybersecurity engagement usually include?
Scoping and a threat model, assessment or testing of the agreed systems, a risk-ranked report, remediation support and a retest. Ongoing work such as monitoring, secure-SDLC tooling or periodic reassessment is scoped separately. Mindrops also assesses and hardens applications and cloud environments it did not build.
How is cybersecurity work priced?
It is priced from the scope. A scoping call defines the systems, depth of testing and deliverables, and produces a scoped estimate. Assessments and VAPT normally run as fixed scope; remediation and ongoing security work as time & materials or a dedicated team — see engagement models.
How long does a security engagement take?
It depends on the number of applications, APIs and environments and the depth of testing, so duration is agreed during scoping. Larger programmes run in phases, highest-risk systems first, so findings reach your team early.
What support is available after the assessment?
Mindrops helps implement fixes, retests to confirm they hold, and can keep controls effective with monitoring, secure-SDLC checks in your pipelines, periodic reassessment and ongoing support through managed IT services.
Is Mindrops certified?
Yes. Mindrops is CMMI Level 3 appraised, a GeM-verified seller and MSME/Startup India registered, and delivers under a secure SDLC aligned to OWASP and GDPR. See the certifications page for the full list.

Talk to our team

Get a quick view of the approach, timeline and cost for your idea.

We'll get back to you as quickly as possible.

Related insights

Contact us

Tell us what you need to protect and what is driving the review — a launch, an audit, a customer questionnaire or an incident. A security engineer will reply as quickly as possible.

Book a security review

An engineer will respond as quickly as possible.

Have a defined scope? Get a quote

We use essential cookies to run this site. Analytics and marketing cookies are optional.