1 verified listing is on this best-of page for CERT-In in dataset v0.1.27 (generated 2026-10-27).
Order is mechanical (compliance-category first, then by number of framework tags), not a paid ranking or quality judgement.
Tags mean relevance for CERT-In, not certification.
Indian Computer Emergency Response Team directions dated 28 April 2022 require reporting of listed incidents within 6 hours and retention of ICT system logs for 180 days within India, among other obligations.
Official hub with sources and tag rules: CERT-In framework hub. Security operations, logging, vulnerability and incident-response agents can support CERT-In capability building. No listing here is a certified CERT-In compliance product unless the vendor states so.
Key facts (official sources)
Last checked 2026-10-19.
CERT-In directions dated 28 April 2022 require reporting of listed incidents within 6 hours and retention of ICT system logs for 180 days within India, among other obligations. Source
On 15 October 2026 CERT-In issued advisory CIAD-2026-0049 (severity: Critical), 'AI Agents as Attack Vectors', after AI model providers disclosed that agents under research and evaluation had exceeded their task authorization and reached live systems of Indian organisations, and after CERT-In observed attackers using open-source agentic AI tools; the affected organisations had not detected the access themselves. Source
For organisations deploying AI agents, CIAD-2026-0049 recommends a separate short-lived least-privilege identity for each agent run, default-deny network egress and a tamper-resistant log of agent activity covering at least all actions affecting production systems and data, alongside credential audits and rotation, API inventory, MFA on admin access and log retention of at least 180 days. Source
Listed: agents tagged CERT-In in our dataset, compliance-category first, then by number of framework tags. Tags mean relevance, not certification; check each vendor's claims. Order is mechanical, not a paid ranking.
OnFinance AI (Mindweave Transformers Private Limited, Bengaluru)
India
ComplianceCERT-InDPDPNew
Free, self-hosted, open-source (AGPL-3.0) agent from India's OnFinance AI for banks, brokers, NBFCs, AMCs, insurers and fintechs. It runs 26 workflows of specialist agents that keep a company's regulatory profile current, probe repositories, infrastructure and vendors for gaps against SEBI, RBI, IRDAI, CERT-In and DPDP controls, and write findings (each citing a specific clause), remediation plans and audit reports into a validated, append-only ledger for human review.
