About Us

About Sandbox Security

From Compliance To Real-World Security Built for regulated, high-risk, and digitally evolving environments where security, compliance, and risk visibility are critical.

Who We Are

We are a team of cybersecurity practitioners, compliance specialists, and offensive security experts with deep experience across financial services, fintech, government, and digital platforms.

Our approach combines advisory, execution, and continuous validation, enabling organizations to not just meet regulatory requirements, but to withstand real-world threats.

Who We Are

What We Do

We operate at the intersection of:

Compliance &
Regulatory

Compliance & Regulatory

PCI DSS · Data Privacy · ISO · Regional frameworks

Execution &
Assurance

Execution & Assurance

Risk assessments · Security validation · Control effectiveness

Offensive
Security

Offensive Security

Red teaming · Penetration testing · Adversarial simulation

AI Security &
Emerging Risk

AI Security & Emerging Risk

AI risk validation · Model testing · SATLAS-powered adversarial simulation

Why Sandbox Security

Built for execution.

Real impact.

check

PCI QSA-led expertise with deep compliance experience

check

Execution-first approach — not just advisory

check

Real-world validation through red teaming and AI testing

check

Strong regulatory alignment across GCC, India, Africa, Southeast Asia, and Central Asia

check

Flexible engagement models tailored to business environments

What Makes Us Different

Most firms stop at

assessment.

We focus on execution, validation, and measurable outcomes.

Audit readiness→Actual certification
Vulnerability reports→Real remediation
Theoretical risk→Validated attack scenarios
AI adoption→Secured AI systems

Our Regional Presence

Operating across five regions

Deep local expertise across the world's fastest-growing and most regulated digital ecosystems.

GCC

UAE · Saudi Arabia · Qatar · Oman · Bahrain

Supporting highly regulated financial services and fintech ecosystems with alignment to UAE IA, SAMA, and NCA frameworks.

Southeast Asia

Singapore · Malaysia · Indonesia · Thailand · Philippines · Vietnam · Cambodia · Laos

Fast-growing digital economies with rising demand for PCI DSS, data protection, and cybersecurity validation.

Central Asia

Kazakhstan · Uzbekistan · Azerbaijan · Kyrgyzstan · Turkmenistan

Supporting emerging markets in strengthening cybersecurity maturity and compliance readiness.

India

RBI-regulated entities · Fintech ecosystems · Enterprise environments

Expertise across DPDP, financial regulations, and large-scale digital platforms.

Africa

Kenya · Egypt · Morocco · Ethiopia · Tanzania · Uganda

Supporting organizations in emerging markets to build cybersecurity maturity, regulatory alignment, and risk resilience.

Our
Approach

Structured. Execution-led. Outcome-driven.

Understand the environment and risk landscape

Align with regulatory and business requirements

Execute remediation and validation

Deliver measurable security outcomes

Leadership

Built by practitioners. Driven by execution.

Our leadership team brings deep expertise across cybersecurity, PCI DSS, data privacy, and enterprise risk,
with experience across banking, fintech, and regulated industries.

Rahul Purohit

Rahul Purohit

Founder & Chief Executive Officer

LinkedIn
Bharat

Bharat

Chief Technology & Product Head

LinkedIn
Madhup Bajpai

Madhup Bajpai

Head of Compliance & PCI Practice

LinkedIn
Amrita Choudhury

Amrita Choudhury

Head of Sales & Marketing

LinkedIn

“SandBox Security helps regulated organizations achieve compliance, reduce risk, and validate
real-world security through a combination of advisory, offensive testing, and AI-driven platforms.”

Ready to move
beyond compliance?

Get In Touch
With Us

Address

Dubai, UAE
Bangalore, India

Phone

UAE: +971 50 846 2043
India: +91 83494 38327