New Delhi, India — 10 July 2025 — Codec Networks Pvt. Ltd. today announced the launch of its Application, API & DevSecOps Security Program, a specialized assurance service for organizations that build, operate or depend on customer-facing applications, mobile apps, API ecosystems, source-code repositories, CI/CD pipelines, open-source dependencies and cloud-native architectures.
Applications and APIs are now the primary business interface for customers, partners and regulators. Banking, fintech, insurance, healthcare, e-commerce and SaaS platforms run on mobile apps, microservices, API gateways, automated build pipelines and thousands of open-source components, creating an attack surface that changes with every release. A single weakness in API authorization, token handling, a build step or a vulnerable library can lead to account takeover, payment fraud, data leakage and regulatory exposure.
Codec Networks’ new program moves application security beyond the pre-go-live penetration test. It combines web application penetration testing, Android/iOS mobile security assessment, REST, SOAP and GraphQL API security testing, secure code review with SAST/DAST, software composition and supply-chain testing, CI/CD pipeline security review, threat modelling, cloud-native application testing and a DevSecOps maturity assessment into one engagement with a single remediation dashboard.
“Security that shows up only at go-live is too late and too expensive. Our program sits inside the way engineering teams actually ship: in the repository, the pipeline, the API gateway and the release gate. We validate what is exploitable, hand developers fixes they can act on, and retest until it is closed.”
— Piyush Mittal, Director Business Governance, Codec Networks Pvt. Ltd.
Every finding is manually validated to remove false positives, rated by exploitability and business impact, and tracked through a remediation workshop, retest and formal closure. Critical findings are escalated within an agreed SLA. Observations are mapped to OWASP Top 10 and API Security Top 10, OWASP ASVS/MASVS, NIST SSDF, ISO/IEC 27001:2022, SOC 2, PCI DSS and the expectations of RBI, SEBI, IRDAI and CERT-In, giving security, compliance and product teams audit-ready evidence from the same engagement.
The program is offered in four packages: an API Quick Check for 10–25 APIs, AppSec Professional covering web, mobile and API testing with retest, a DevSecOps Maturity assessment of pipelines, code and controls, and a monthly or quarterly Secure SDLC Retainer for periodic testing, release security reviews and advisory support. Delivery is remote-first with secure access, controlled testing windows and daily or weekly status reporting; a typical one-time assessment runs from kickoff to final closure report in four to eight weeks.
The Application, API & DevSecOps Security Program complements Codec Networks’ broader Cyber Assessment & VAPT Assurance Program and is available immediately to SaaS, fintech, BFSI, payments, insurance, healthcare, e-commerce, IT/ITES, telecom, public-sector and enterprise customers across India and internationally.