Frequently asked questions

Netra is an AI-powered Compliance & Audit OS from Cyber Soldiers Lab. Regulated organisations use it to run governance, risk, policy, audit and third-party risk as one connected system. MSSPs, vCISO practices and audit firms use it as a Managed Compliance & Audit OS to deliver compliance to many clients from one login.

CISOs, compliance leads, risk analysts, asset managers, auditors and auditees work in Netra every day. Executives and boards use its reports for oversight. Each person gets a role that controls what they can see and do.

Three ways. Netra builds your programme for you, so you start from populated policies, tasks, risks and controls rather than a blank template. Everything is connected, so one completed task and its evidence update every framework, policy, risk, audit and asset it touches. And control status is derived from completed work, not typed in by hand, so every number can be traced back to a task and a file.

No. Netra removes the manual overhead of building the programme, chasing status and assembling reports, so your people can spend their time on judgement: prioritising risk, treating gaps and making decisions. It is a co-pilot, not an autopilot.

Netra is built by Cyber Soldiers Lab, a team of veterans and security industry experts.

Netra's framework library holds 50+ frameworks. For India it includes the RBI CTRRAF 2026 Directions for each class of regulated entity, NISPG 2019 v5.0 and the CERT-IN guidelines, alongside ISO 27001:2022, SOC 2, NIST CSF, GDPR, PCI DSS, HIPAA, DORA and NIS2. The Framework Library lists every framework, and the Framework Selector suggests the ones relevant to you.

Frameworks overlap heavily. The same control, for example multi-factor authentication, appears in ISO 27001, SOC 2, NIST CSF and others. Netra maps each task to every framework control it satisfies, so completing it advances all of them at once. Each task shows exactly which frameworks it satisfies.

Netra includes the RBI CTRRAF 2026 Directions as separate entries for Commercial Banks, Small Finance Banks, Payments Banks, Urban Co-operative Banks, NBFCs, Credit Information Companies and All India Financial Institutions. You load the Direction that applies to your entity type.

Yes. Netra includes the CERT-IN cyber-security directions of 28 April 2022, which cover areas such as reporting specified incidents within six hours, time synchronisation and keeping ICT logs for a rolling 180 days. Netra organises the readiness checks, evidence and corrective actions. It is not a SIEM or a log-storage tool.

Use the Framework Selector. Choose your industry and country of business and it suggests the frameworks from our library most likely to be relevant, and our team follows up with a detailed recommendation. It is a starting point, not legal advice.

Yes. Your organisation's administrator can add frameworks after onboarding. The new framework's controls, tasks and policies are generated into your workspace, and work you have already done counts towards it wherever the same control applies.

Talk to us about the framework you need. The library is growing, and we will tell you where that framework stands.

No tool can certify you. Certification and regulatory sign-off come from your auditor, certification body or regulator. Netra organises the work, evidence and audit records so that you can show them what has been done.

Yes. One click generates a board-ready report for each framework from live data: executive summary, risk exposure, policy impact, a prioritised remediation roadmap, critical gaps, the full register and a sign-off page.

It is computed live from control and task completion across every domain, weighted by each task's importance, and rolled up to a single figure out of 100. You never edit the score directly. You move it by doing the work.

No. When your workspace is created, Netra AI generates your policies, controls, tasks and risks from the frameworks you choose. You start from a populated programme and work it, rather than writing it.

Yes. Upload your existing documents and they sit alongside the live Netra policy, so auditors can see what the previous version said.

No. Evidence attached to a task while doing the work flows into the audit, so you never assemble it twice. The audit does not start from a blank page.

Netra records evidence so you can show it has not been changed since it was submitted. That makes the audit record defensible and traceable.

The Audit Centre runs internal, external, certification and regulatory audits end to end: planning, fieldwork, findings, corrective actions and reports. The audit type sets sensible defaults for the engagement.

No. Auditors see only what is in scope for the audit and what you submit. The auditor's workpapers stay private to the audit team. You see checkpoint status, requests, findings and issued reports.

No. Netra AI advises and drafts; you review and confirm. It does not change task status, evidence or compliance status on its own. A person stays accountable, which matters for anything an auditor will see.

It works from your organisation's own records: your controls, tasks, risks, evidence and assets. A general assistant can explain compliance in general. Netra AI can tell you what evidence your MFA control still needs and which of your assets a task applies to.

No. Netra AI works only within your organisation's boundary. Your compliance data, risk records and conversations are never shared with or visible to other organisations.

Use it to move faster, but verify important information before you rely on it. Netra AI reminds users to do this, and a person always makes the final decision.

Netra finds vendors from what Accounts and Purchase actually pay, runs public-source checks, sends assessments through a vendor portal and records each decision with a rating you can defend.

You upload the lists Accounts and Purchase already keep, and Netra shows only the vendors missing from your third-party register. The uploaded file is not stored, and columns holding bank details, account numbers or employee data are refused before anything is read.

Through a vendor portal, one section at a time with progress always visible. Where Netra has read something publicly, the answer is offered as a suggestion the vendor confirms or changes. It is never submitted on their behalf.

Yes. The Partner Portal lets an MSSP, vCISO practice or audit firm manage every client organisation from one login and run multi-client audits. Each client's data stays separate.

Yes. In the UAE and the wider GCC we work mainly through partners: MSSPs, vCISO practices and audit firms who deliver Netra to their clients. Netra supports the global standards most often asked for in the region, including ISO 27001, SOC 2 and PCI DSS.

Yes. Audit firms can run engagements through the Audit Centre and manage their clients through the Partner Portal.

Tell us about your practice through the Become a Partner form. We work with MSSPs, vCISO practices, audit firms, SOC providers and cybersecurity consultancies.

By default, in Netra's own cloud. You can also keep evidence in your own storage, such as Azure Blob, Amazon S3, Google Drive, OneDrive/SharePoint, Dropbox Business or Box. Evidence is tamper-evident, so you can show it has not changed.

Yes. Each organisation's data is isolated, and this applies to Netra AI as well. Partners managing several clients see each client's data separately.

Yes. MFA is part of account set-up because Netra holds sensitive compliance data. If someone loses their device, their organisation's administrator can reset it.

No. Consent records are append-only and the security audit log is a fixed trail. That is what makes them credible evidence in a privacy audit or dispute.

Netra includes Right to Erasure and Data Export workflows that track each data-subject request against a 30-day timeline. This supports GDPR and DPDPA obligations and gives you an evidenced record to show a regulator.

You answer a short onboarding questionnaire, including which frameworks apply, and Netra AI builds your workspace. After a short one-time set-up of your organisation profile, storage and team, you are working in Netra. There is no long implementation project.

You can subscribe to Netra directly, or use it through a managed-service partner such as an MSSP, vCISO practice or audit firm. Pricing depends on your frameworks, organisation size and requirements, so we share it in a written proposal after a short scoping call.

Book a demo. We will show Netra on the frameworks that matter to you, then agree a tightly scoped proof of concept if it helps your decision.

Yes. After a demo we can agree a tightly scoped proof of concept on the frameworks and processes that matter most to you.

Email info@cybersoldiers.in or use the Book a Demo button on any page.