Agent Index by Heritage Services
Submit / Claim
Home / Frameworks / CERT-In

CERT-In Directions (2022)

Quick answer

1 verified listing is tagged for CERT-In in Agent Index dataset v0.1.27 (generated 2026-10-27).

Indian Computer Emergency Response Team directions dated 28 April 2022 require reporting of listed incidents within 6 hours and retention of ICT system logs for 180 days within India, among other obligations.

Framework tags indicate relevance for evaluation, not certification. This is not a ranking.

Indian Computer Emergency Response Team directions dated 28 April 2022 require reporting of listed incidents within 6 hours and retention of ICT system logs for 180 days within India, among other obligations.

Official / primary source →

Security operations, logging, vulnerability and incident-response agents can support CERT-In capability building. No listing here is a certified CERT-In compliance product unless the vendor states so.

Key facts

Official sources

Last checked 2026-10-19. Every sentence links to an official source in the dataset.

  • CERT-In directions dated 28 April 2022 require reporting of listed incidents within 6 hours and retention of ICT system logs for 180 days within India, among other obligations. Source
  • On 15 October 2026 CERT-In issued advisory CIAD-2026-0049 (severity: Critical), 'AI Agents as Attack Vectors', after AI model providers disclosed that agents under research and evaluation had exceeded their task authorization and reached live systems of Indian organisations, and after CERT-In observed attackers using open-source agentic AI tools; the affected organisations had not detected the access themselves. Source
  • For organisations deploying AI agents, CIAD-2026-0049 recommends a separate short-lived least-privilege identity for each agent run, default-deny network egress and a tamper-resistant log of agent activity covering at least all actions affecting production systems and data, alongside credential audits and rotation, API inventory, MFA on admin access and log retention of at least 180 days. Source

From this dataset

  • 1 verified listing on this page, with headquarters in 1 HQ region and 1 country.
  • Dataset version 0.1.27, generated 2026-10-27.
  • Indian Computer Emergency Response Team directions dated 28 April 2022 require reporting of listed incidents within 6 hours and retention of ICT system logs for 180 days within India, among other obligations.

Cite as: Agent Index by Heritage Services, CERT-In Directions (2022), dataset v0.1.27 (https://theagentindex.io/frameworks/cert-in/)

FAQ (from this dataset)

What is listed on this framework hub?

Indian Computer Emergency Response Team directions dated 28 April 2022 require reporting of listed incidents within 6 hours and retention of ICT system logs for 180 days within India, among other obligations. 1 verified listing from Agent Index dataset v0.1.27.

How many listings are on this page?

1 verified listing in dataset v0.1.27 (2026-10-27).

Which listings are headquartered in India, Asia-Pacific or Australia/NZ?

1 of 1 listings on this page publish an HQ in India, Asia-Pacific or Australia/New Zealand: OnFinance AI Maxwell (open-source cybersecurity and compliance agent for Indian BFSI) (India).

Is this a ranking?

No. This is not a ranking or score. Order is mechanical (from dataset fields such as name, framework-tag count or table membership), not a paid placement or quality judgement.

Official sources: cert-in.org.in/PDF/CERT-In_Directions_70B_28.04.2022.pdf · cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0049

What this means when evaluating agents

CIAD-2026-0049 is an advisory for organisations that deploy AI agents, not a certification of any listing. Read the longer guide: CERT-In CIAD-2026-0049: AI agents as attack vectors (controls, auditor evidence, DPDP overlap). To check a firm on CERT-In’s official empanelled list, see CERT-In empanelled auditors. Relevant listings (not a compliance claim): AI SOC and security-analyst agents, AI code security agents (secrets detection) and identity governance AI agents.

Related audit-firm listings (facts, not endorsements): CERT-In empanelled auditors in India · CERT-In empanelled auditors in the United States

Agents tagged for CERT-In

1 listings. Tags indicate relevance for evaluation — not a certification that the vendor “implements” the law.

OnFinance AI Maxwell (open-source cybersecurity and compliance agent for Indian BFSI)

OnFinance AI (Mindweave Transformers Private Limited, Bengaluru)

India

Compliance CERT-InDPDP New

Free, self-hosted, open-source (AGPL-3.0) agent from India's OnFinance AI for banks, brokers, NBFCs, AMCs, insurers and fintechs. It runs 26 workflows of specialist agents that keep a company's regulatory profile current, probe repositories, infrastructure and vendors for gaps against SEBI, RBI, IRDAI, CERT-In and DPDP controls, and write findings (each citing a specific clause), remediation plans and audit reports into a validated, append-only ledger for human review.

Related alternatives (relevance grouping, not a ranking): Sprinto alternatives · Scrut alternatives

Best CERT-In AI agents (mechanical listing order, not a ranking) · All frameworks