Strategy & Governance

Managed Security

Cyber Defense

Governance, Risk & Compliance

Operations & People

Talk to us

RF anechoic chamber · built to hear radio, not sound

Cybersecurity without the alarm.

Aphelion Cyber is a cybersecurity company in Ahmedabad and Sharjah, delivering managed detection and response, identity attack-path analysis, and compliance automation for India’s mid-market.

The room where you find out what a machine sends when it thinks no one is listening. Put AphelioNYX's AD Pen-Test module in one. Nothing. Air-gapped: no outbound calls, ever.

Ahmedabad · Sharjah · Est. 2024 One step ahead of every threat

Aphelion: the point in an orbit farthest from the sun

One step ahead of every threat.

Utmost integrity  ·  Proactive defense  ·  Resilience & adaptability

Aphelion Cyber is a cybersecurity consultancy and platform company working from Ahmedabad and Sharjah. We help organisations build a proactive, resilient security posture: risk and governance, security architecture, identity and access, cloud and network security, and incident response.

In a category that sells through fear, we would rather show you the room. We already know what is out there. The work is making sure it never matters to you.

  • 2024Founded
  • 100+Organizations secured, across the globe
  • 2Offices: Ahmedabad and Sharjah

What we do

01 / 07

Three disciplines. One posture.

Thirty-six services in total. See the whole capability map if you already know what you are looking for.

01

Find it before someone else does.

Offensive testing by people who do it for a living: penetration testing across web, mobile, API, cloud, wireless and source code; red teaming that behaves like a real adversary; OT and IoT assessment for plants that cannot go offline.

Cyber Defense
03

Someone is watching, and they can act.

A managed SOC that combines SIEM and analyst judgement around the clock; incident response that is retained before it is needed; dark web monitoring, identity governance and third-party risk as ongoing disciplines rather than projects.

Managed Security

The platform

02 / 07

Three modules, one sign-on, and one that needs no internet at all.

AphelioNYX

Every modern identity platform has the same hidden requirement: a working internet connection. For defence, OT and classified environments, egress is forbidden. AphelioNYX needs none.

AD Pen-Test outbound calls  0  · by design, not by firewall

AD Pen-Test is a sensor appliance, a Node.js API with a graph engine, and a React command centre, all inside your perimeter. Nothing phones home because there is nothing to phone.

Module

Compliance Hub

Every framework in one place, evidence automated, audit-ready all year.

Module

MDR

24/7 managed detection and response combining SIEM and SOC capability.

Module

AD Pen-Test

Identity posture, attack-path graphing and real-time detection, air-gapped.

350+Active Directory posture rules
5Hops to Tier-0 on an average attack path
7OT protocols fingerprinted passively
7 dSLA on critical findings

Tour the platform

Instruments

03 / 07

Try the argument, not the brochure.

Every interactive piece on this site runs on clearly labelled sample data. None of it measures you. All of it is built to teach one thing you can check for yourself.

Why this is here

The most expensive control is the one nobody rehearsed.

Most intrusions still start with a person and a message. Simulation is not about catching staff out; it is about making the tells ordinary, so the real one on a busy Tuesday looks exactly like the drill.

Phishing simulation    Awareness training

Leadership

04 / 07

Led by people with names.

Darshap Nayak

Chief Executive Officer

Formerly a consultant at KPMG. Holds a master’s degree in cybersecurity, with more than seven years in security operations.

LinkedIn

Hemang Desai

Chief Operating Officer

ICT network specialist from Australia. Systems, networks and technical support: the part of security that has to work at 3 a.m.

LinkedIn

Jaimin Somani

Director of Cybersecurity & VAPT

Fifteen years and more of academic and hands-on vulnerability assessment and penetration testing experience.

LinkedIn

Technology alliances

05 / 07

The tools we actually run.

Platforms we deploy, resell or build against inside client environments. These marks belong to their owners and appear here as a statement of what we use, not of who endorses us.

  • SentinelOne
  • Wiz
  • CybelAngel
  • Secureframe
  • AWS
  • Yotta
  • Keypasco
  • Satark AI

Who we work with

06 / 07

Trust, stated plainly.

  • Finance & Banking
  • Healthcare
  • Retail & E-commerce
  • Technology
  • SaaS
  • Hospitality
  • Manufacturing
  • Pharmaceuticals

AphelioNYX is SOC 2, ISO and GDPR compliant. Attestations are available on request under NDA. We would rather hand you the report than print a badge.

  • 01Encryption in transit with TLS 1.2 or later, and at rest with AES-256.
  • 02Single sign-on with SAML, role-based access control, and full audit logging.
  • 03Hardened infrastructure, automated backups, geographic redundancy, and recovery objectives that are tested rather than assumed.
  • 04Three modules, one sign-on: Compliance Hub, MDR and AD Pen-Test.

100+ organizations secured

Across the globe, and across eight industries. We name a client only with their written permission.

Next step

07 / 07

Forty-five minutes. Your environment, not a slide deck.

A personalised demo of AphelioNYX and a free readiness assessment against the frameworks you are actually asked for.