Bharat in Betastartup field guide
← Back to the atlas
No. 145ProposalSecurity and governance

AI Security and Enterprise IT

Source

The idea

Apply AI to threat detection, identity management, and enterprise cybersecurity.

Why this is interesting

  • Threat detection serves security operations teams; identity management serves IT administrators. The buyer is the security or IT leader. Both are accountable functions where a missed alert and a false alarm both cost something.
  • This is a globally portable, competitive category, and the source gives no India-specific condition. The adoption assumption is that security teams will let automated systems triage or act. That depends on accuracy, integration with existing tools and clear accountability for errors.

Possible starting points

01

Alert triage for small security teams

Reduce the manual review load on a lean security team by grouping and explaining alerts it already receives.

02

Access review automation

Help IT administrators run periodic access reviews, flagging unusual permissions for a person to approve or revoke.

Questions to answer

  1. What is the cost of a false positive and a false negative for the chosen team, and can the product reduce both?
  2. Which existing security or identity tools must it integrate with before a buyer will trial it?
No. 265Problem statementSecurity and governance

API Security

Development of an API security solution that detects anomalies, maintains data integrity, and automatically self-heals, in the context of enterprise environments and platforms like API Setu.

No. 1120Problem statementSecurity and governance

Creating an application to identify the presence of government issued personally identifiable information (PII) embedded in documents and data, inadvertently or otherwise.

Develop an application or library that detects government-ID-related personal information in uploaded documents or supplied data, initially covering Aadhaar, PAN and driving licences. Alert the individual and receiving organisation so they can assess necessity and remove, redact or mask unnecessary information. The source discusses consent, access and retention responsibilities and suggests making the application publicly available. It does not require sending the documents to a third-party service.

No. 1128Problem statementSecurity and governance

Web-scrapping tool to be developed to search and report Critical and High Severity Vulnerabilities of OEM equipment (IT and OT) published at respective OEM websites and other relevant web platforms.

Develop an open-source monitoring script for critical/high-severity IT and OT vulnerability notices directly from OEM and other relevant public websites. Handle differing notice formats and promptly email designated recipients with available product/version, vendor, severity, vulnerability and published mitigation information. The source seeks earlier notice than delayed secondary aggregation; unavailable fields may remain empty.