Managed AppSec, SOC/MDR and Dark Web Intelligence on In-House Security Platforms

Castellum Labs is an Indian cybersecurity technology and services venture founded in 2018 by Rajeev Shukla, operating as a business unit of Raaga Technologies Private Limited with a registered office in Chandigarh and a regional office in Hyderabad. It targets enterprises that want application security, security operations monitoring and external threat intelligence handled as continuous managed programs rather than one-off audits, and delivers those programs to clients globally from a single India-based delivery center.

Three in-house platforms carry the work. appFORT is a cloud AppSec orchestration layer that runs SAST, DAST and IAST across thousands of applications concurrently, tracking findings through analysis, remediation and change management. threatNiXD supplies the SOC side, combining log collection, deep correlation, UEBA and automation with human-executed response playbooks for round-the-clock MDR. watchOUT and hunter handle external exposure, searching dark web forums, paste sites and code repositories for leaked data and emitting STIX/TAXII feeds into existing security tooling.

What separates the firm from typical regional service providers is that it builds and operates its own tooling rather than reselling third-party scanners, and insists that all testing run from hardened cloud lab infrastructure instead of analyst laptops. Customers work from one portal covering tasks, issues, vulnerabilities, reports and dashboards. Published output includes annual, monthly and weekly threat reports, and named references include Star Health and Allied Insurance. A Cloud SecOps practice is live and an AI Security line is announced as coming soon.