Help Center

Click Start Free Trial on any page. Fill in your full name, work email, organisation name and a password. You'll receive a 6-digit verification code by email — enter it to activate your account. No credit card is required for the 14-day trial.

The 14-day free trial gives you full access to all Starter plan features: device monitoring for up to 10 devices, security alerts, DPDPA 2023 compliance checks, report generation and team access for up to 3 members. No restrictions — evaluate the real product.

Your dashboard shows a real-time Security Score (0–100), a breakdown across 4 categories (DPDPA Compliance, Network Security, Endpoint Security, Data Protection), recent alerts and device health status. The score updates automatically as your device agents report in.

Go to Settings → Team in the dashboard and click Invite Member. Enter their email address and select a role: ADMIN (can manage devices, alerts and settings) or VIEWER (read-only access). They'll receive an invitation email valid for 48 hours.

The Device Agent is a lightweight program installed on your company's Windows, Linux or macOS devices. It runs in the background as a system service and periodically sends a security health report — covering OS patch status, antivirus, firewall, disk encryption and pending updates. It does not read files, record keystrokes, or collect employee activity.

1. Go to Devices → Add Device in your dashboard. 2. Select the Windows tab. 3. Download the CyberLetics Agent Installer (.exe). 4. Run the installer — it will ask for your API key (visible on the same page). 5. Complete the wizard — the agent installs as a Windows service and starts automatically.
Requires Windows 10 / Server 2016 or later. Run the installer as Administrator.

Go to Devices → Add Device and select the Linux tab. Copy the one-line install command shown (it includes your API key) and run it as root on the target machine. The script downloads the agent binary, writes the config file and registers a systemd service that starts on boot.

Go to Settings → API Keys and click Generate New Key. Give the key a label (e.g. "Office Workstations"). Copy the key immediately — it is shown only once. Paste it into the installer or install script. Each key can be used on multiple devices, or you can generate per-device keys.

By default the agent sends a telemetry report every 30 minutes. It also sends security alerts immediately when it detects an event (e.g. a port scan or suspicious process). The dashboard updates in real time via Server-Sent Events — no need to refresh.

A device is marked At Risk when it has one or more of: antivirus not installed, firewall disabled, disk encryption off, or more than 5 pending OS updates. Click the device in the Devices page to see the specific issues. Resolving them updates the status automatically on the next agent check-in.

On the login page, click Forgot? Enter your registered email and we'll send a reset link, valid for 1 hour. If you don't see the email, check spam or contact team@cyberletics.com.

Go to Settings → Billing to view your current plan, next billing date and upgrade options. Upgrades take effect immediately. Downgrades and cancellations take effect at the end of your current billing period — you keep full access until then. No refunds are issued for partial months.

Yes. Click your name in the sidebar to open your Profile page, where you can update your full name and change your password. Organisation settings (name, GST number) are managed from Settings → Organisation.

Account deletion can be requested from Settings → Account → Delete Account or by emailing team@cyberletics.com. All your personal data and device records are permanently removed within 30 days. This action cannot be undone.

Your score is out of 100 across four equally-weighted categories (25 points each):

• DPDPA Compliance — GST set, no critical alerts, no data exfiltration events
• Network Security — no at-risk devices, no expired certificates, no port scans
• Endpoint Security — antivirus installed, OS patches current, firewall on, disk encrypted
• Data Protection — no data exports, no weak-password alerts, plan tier

Scores ≥ 80 = COMPLIANT · 50–79 = PARTIAL · < 50 = NON-COMPLIANT

CyberLetics is built around the Digital Personal Data Protection Act, 2023 (DPDPA) — India's primary data protection law. The DPDPA category checks GST registration on file, no active critical data-related alerts and no data exfiltration events. We also cross-reference device software against the NIST National Vulnerability Database (NVD) for known CVEs.

Go to Reports in the dashboard and click Generate Report. Select the report type (Summary, Full Compliance or Device Inventory) and date range, then click Generate. Reports are created as PDFs and ready within seconds. You can also schedule weekly reports to be emailed automatically.

Critical alerts unresolved for more than 48 hours are automatically escalated — the organisation owner receives an escalation email every morning at 9 AM IST until the alert is resolved or marked a false positive. You also receive a Weekly Security Digest every Monday at 8 AM IST.

Yes. All data is encrypted in transit using TLS 1.3 and stored in a PostgreSQL database hosted on AWS ap-south-1 (Mumbai) — keeping your data within India. Passwords are hashed with bcrypt; API keys are stored as SHA-256 hashes. We never sell your data. See our Privacy Policy for full details.

The scanner runs checks on any domain you provide, including:

• SSL Certificate — validity, issuer and days to expiry
• Security Headers — HSTS, X-Frame-Options, X-Content-Type-Options, CSP, Referrer-Policy, Permissions-Policy
• HTTPS Redirect — whether HTTP is redirected to HTTPS
• Google Safe Browsing — checks the URL against Google's malware/phishing database
• Software, malware-injection & data-breach — exposed files, injected scripts and domain breach exposure

Each check returns PASS, WARN, FAIL or UNKNOWN. The overall score (0–100) is the weighted average.

Use the free Website Scanner — type or paste a domain (e.g. example.com) and click Scan. Results appear as each check completes; the final score (0–100) is shown once all checks finish. No signup required.

No. For security reasons the scanner blocks all private, internal and reserved addresses — including localhost, 127.x.x.x, 192.168.x.x, 10.x.x.x, 172.16-31.x.x and link-local addresses like 169.254.x.x. Only publicly reachable domains and IPs are permitted.

Each organisation can have up to 3 scans running simultaneously. If you start a 4th while 3 are in progress you'll see a rate-limit response — wait for one to complete. Past results are kept in history and can be reviewed any time.

UNKNOWN means the Google Safe Browsing check couldn't run — usually because the API key isn't configured on the server. It is not an indication that the URL is unsafe. An UNKNOWN result contributes 0.5 points (half of PASS) to the final score.