Skip to content
Mounteyes

Cybersecurity for businesses anywhere in the world

Mounteyes is based in Jaipur, India, and works with businesses in any country. Almost everything we do — watching your servers, websites and networks, testing them for weaknesses, responding when something goes wrong — happens over the internet. Where you are changes the time zone and the rules you answer to. It does not change the work.

Why small businesses everywhere are the target

The attacks are the same in every country: a convincing email, a stolen password, a server nobody patched. The official numbers say so.

What we deliver remotely, in any country

  • Continuous monitoring of your servers, websites and APIs with ME AI SAWAIMS, so you hear about a problem before your customers do.
  • Network monitoring and vulnerability scanning for office and cloud networks.
  • Penetration testing (VAPT), website and API security testing, cloud security reviews and secure code review.
  • Incident response, malware removal, blacklist clean-up and digital forensics.
  • Compliance readiness for ISO 27001 and SOC 2, including the security questionnaires your customers send you.
  • Security awareness training for your team, delivered online.

The one exception is AI CCTV deployment, which needs a site assessment and set-up on the premises. We offer it where we can visit. If you are somewhere else, write to us and we will tell you honestly whether it is practical.

How working together across borders works

  1. Tell us what worries you

    Email us or use the form. Describe what you run and what happened, in your own words — no technical vocabulary needed. We reply within 24 hours.

  2. Scope and permission, in writing

    Before any scan or test, we agree in writing which systems are included, when we may test and what is off-limits, signed by someone with authority over those systems. Testing without permission is a crime almost everywhere, and that document protects you as much as us.

  3. A quote for that scope

    We do not publish prices, because the scope decides the cost. You get a fixed quote for a project, or a monthly figure for ongoing monitoring, before any work starts.

  4. The work, then a report you can act on

    Findings come in plain English, ranked by what to fix first, with the evidence and the fix for each one. Ask, and we re-test after you have fixed them.

Time zones

We work on India Standard Time (UTC+5:30). That covers most of the working day in the Gulf, the morning and early afternoon in the UK and Europe, and the early morning or late evening on the US East Coast. Monitoring alerts are sent automatically and do not wait for office hours. During an active incident, tell us your time zone and we agree how we stay in touch.

The breach-reporting deadline where you operate

If personal data leaks or a serious incident hits your business, many countries give you a deadline to tell a regulator. The clock usually starts when you become aware of it — not when you finish investigating. These are the main deadlines as of October 2026.

European Union — GDPR
Tell your data protection authority within 72 hours of becoming aware of a personal data breach. Tell the people affected without undue delay if the risk to them is high.
European Union — NIS2
For medium and large organisations in the sectors NIS2 covers: an early warning within 24 hours of a significant incident, a fuller notification within 72 hours, and a final report within one month.
United Kingdom — UK GDPR
The same 72-hour rule, reported to the Information Commissioner's Office (ICO).
United States
No single national rule for most private businesses: each state has its own breach-notification law. Healthcare organisations under HIPAA have at most 60 days. Listed companies must disclose a material incident to the SEC within four business days of deciding it is material.
Canada — PIPEDA
Report a breach that creates a real risk of significant harm to the Privacy Commissioner, and tell the people affected, as soon as feasible.
Australia
Assess a suspected data breach within 30 days. Businesses with turnover above A$3 million that pay a ransom must report the payment within 72 hours.
Singapore — PDPA
Notify the PDPC within 3 calendar days of deciding a breach is notifiable.
Saudi Arabia — PDPL
Notify SDAIA within 72 hours.
India
Report specified cyber incidents to CERT-In within 6 hours of noticing them. Breach-notification duties under the DPDP Rules start in about May 2027.

General information, not legal advice. Which deadline binds you depends on your sector, your size and where your customers are — check the regulator's own guidance for your case.

What you can expect from us

The people who scope your work are the people who do it. Every claim we make about a platform comes with a stated limit. We treat the rules where you operate as part of the job, not an afterthought. And if a smaller engagement — or a different provider — fits your problem better, we will say so.

Start with a short message

Tell us your country, what you run and what you need. If it is urgent, say so in the first line.

Talk to Our Security Team[email protected]

Already been hit? See where to report it in your country