Dr Sahil Baghla

CEO, EH1-Infotech Cybersecurity | vCISO & External Cybersecurity Advisor | External VAPT with Black Box Methodology for SaaS, Web & AI Platforms | Helping Businesses in US, UK, UAE & Worldwide Strengthen Digital Trust

Chandigarh, India

About

๐—›๐—ถ, ๐—œ ๐—ฎ๐—บ ๐——๐—ฟ. ๐—ฆ๐—ฎ๐—ต๐—ถ๐—น ๐—•๐—ฎ๐—ด๐—ต๐—น๐—ฎ. I am a Cybersecurity CEO, vCISO Advisor, and External VAPT specialist helping founders, CEOs, and leadership teams strengthen their digital trust through structured and ethical cybersecurity practices. For me, cybersecurity is not just technical work. It is responsible protection built on trust, discipline, clarity, and long-term thinking. I entered the cybersecurity field in 2011 and have worked with startups, SaaS companies, web platforms, and technology businesses to help identify externally exploitable vulnerabilities across internet-facing applications, APIs, authentication systems, and digital environments. My work focuses on structured External Vulnerability Assessment & Penetration Testing (VAPT) with Black Box methodologies that leadership teams can understand, trust, and scale with. I hold a PhD with research on: ๐— ๐—ฎ๐—ถ๐—ป ๐——๐—ฒ๐˜๐—ฒ๐—ฟ๐—บ๐—ถ๐—ป๐—ฎ๐—ป๐˜ ๐—™๐—ฎ๐—ฐ๐˜๐—ผ๐—ฟ๐˜€ ๐—ผ๐—ณ ๐—–๐˜†๐—ฏ๐—ฒ๐—ฟ๐—ฐ๐—ฟ๐—ถ๐—บ๐—ฒ ๐—ฎ๐—ป๐—ฑ ๐—›๐—ผ๐˜„ ๐˜๐—ผ ๐—ข๐˜ƒ๐—ฒ๐—ฟ๐—ฐ๐—ผ๐—บ๐—ฒ ๐—œ๐˜ ๐—ถ๐—ป ๐—ข๐—ป๐—น๐—ถ๐—ป๐—ฒ ๐—•๐˜‚๐˜€๐—ถ๐—ป๐—ฒ๐˜€๐˜€ This helps me bridge academic depth with practical and leadership-focused cybersecurity strategy. I am the Founder and CEO of ๐—˜๐—›๐Ÿญ-๐—œ๐—ป๐—ณ๐—ผ๐˜๐—ฒ๐—ฐ๐—ต ๐—–๐˜†๐—ฏ๐—ฒ๐—ฟ๐˜€๐—ฒ๐—ฐ๐˜‚๐—ฟ๐—ถ๐˜๐˜† ๐—ฃ๐˜ƒ๐˜. ๐—Ÿ๐˜๐—ฑ., an ISO 9001:2015 and ISO/IEC 27001:2022 certified, DPIIT-recognized cybersecurity company serving organizations across the US, UK, UAE, India, and global markets. ๐—ช๐—ต๐—ฎ๐˜ ๐—œ ๐—ต๐—ฒ๐—น๐—ฝ ๐—ผ๐—ฟ๐—ด๐—ฎ๐—ป๐—ถ๐˜‡๐—ฎ๐˜๐—ถ๐—ผ๐—ป๐˜€ ๐˜„๐—ถ๐˜๐—ต โœ” External Vulnerability Assessment & Penetration Testing (VAPT) โœ” Black Box Penetration Testing for Web Applications & APIs โœ” SaaS Platform & AI System Security Assessments โœ” External Attack Surface Security Reviews โœ” vCISO & Cybersecurity Advisory Services โœ” Governance & Executive Security Reporting โœ” Compliance-Oriented Security Recommendations โœ” Re-Assessment & Remediation Validation ๐—ช๐—ต๐˜† ๐—น๐—ฒ๐—ฎ๐—ฑ๐—ฒ๐—ฟ๐˜€๐—ต๐—ถ๐—ฝ ๐˜๐—ฒ๐—ฎ๐—บ๐˜€ ๐˜๐—ฟ๐˜‚๐˜€๐˜ ๐—บ๐˜† ๐—ฎ๐—ฝ๐—ฝ๐—ฟ๐—ผ๐—ฎ๐—ฐ๐—ต โœ” More than 15 years of cybersecurity experience โœ” Founder and CEO of an ISO-certified cybersecurity company โœ” Structured, ethical, and disciplined execution โœ” Clear communication without unnecessary technical complexity โœ” Focus on long-term trust and responsible security practices ๐— ๐—ถ๐˜€๐˜€๐—ถ๐—ผ๐—ป To help organizations strengthen digital trust through ethical, scalable, and responsible cybersecurity practices. If you want clarity on your external security posture or need structured guidance on protecting your digital environment, I am always open for a concise and honest conversation.

Experience

  • Founder & CEO at EH1-Infotech Cybersecurity
    Apr 2025 - Present ยท 1 yr 4 mos

    ๐—œ๐—ฆ๐—ข ๐Ÿต๐Ÿฌ๐Ÿฌ๐Ÿญ:๐Ÿฎ๐Ÿฌ๐Ÿญ๐Ÿฑ ๐—ฎ๐—ป๐—ฑ ๐—œ๐—ฆ๐—ข/๐—œ๐—˜๐—– ๐Ÿฎ๐Ÿณ๐Ÿฌ๐Ÿฌ๐Ÿญ:๐Ÿฎ๐Ÿฌ๐Ÿฎ๐Ÿฎ ๐—–๐—ฒ๐—ฟ๐˜๐—ถ๐—ณ๐—ถ๐—ฒ๐—ฑ | ๐——๐—ฃ๐—œ๐—œ๐—ง ๐—ฅ๐—ฒ๐—ฐ๐—ผ๐—ด๐—ป๐—ถ๐˜‡๐—ฒ๐—ฑ EH1-Infotech Cybersecurity Pvt. Ltd. is a global cybersecurity company delivering External Vulnerability Assessment & Penetration Testing (VAPT) with Black Box methodologies for SaaS platforms, web applications, APIs, and AI-driven systems. We work with startups, SaaS companies, and technology businesses across the ๐”๐’, ๐”๐Š, ๐”๐€๐„, and global markets to identify externally exploitable vulnerabilities across internet-facing applications, APIs, authentication flows, and external attack surfaces through safe, permission-based security testing. Alongside External VAPT engagements, we also support organizations through vCISO and cybersecurity advisory services. ๐—ž๐—ฒ๐˜† ๐—™๐—ผ๐—ฐ๐˜‚๐˜€ ๐—”๐—ฟ๐—ฒ๐—ฎ๐˜€ โœ” External Vulnerability Assessment & Penetration Testing (VAPT) โœ” Black Box Penetration Testing for Web Applications & APIs โœ” SaaS Platform & AI System Security Assessments โœ” External Attack Surface Security Reviews โœ” OWASP & CVSS-Aligned Risk Analysis โœ” Executive Security Reporting โœ” Re-Assessment & Remediation Validation โœ” vCISO & Cybersecurity Advisory Services ๐—”๐—ฐ๐—ต๐—ถ๐—ฒ๐˜ƒ๐—ฒ๐—บ๐—ฒ๐—ป๐˜๐˜€ โœ” Developed Indiaโ€™s first invite-only Cyber Risk Platform for CEOs with 15-minute risk scoring โœ” Featured in AP News, EIN Presswire, Benzinga, IssueWire and more โœ” Featured in Business Outreach Magazine under the Next Big Success Series ๐Ÿ”— https://pr.eh1infotech.com ๐——๐—ถ๐—ด๐—ถ๐˜๐—ฎ๐—น ๐——๐—ต๐—ฎ๐—ฟ๐—บ๐—ฎ ๐—ฃ๐—ต๐—ถ๐—น๐—ผ๐˜€๐—ผ๐—ฝ๐—ต๐˜† We approach cybersecurity as an ethical responsibility focused on clarity, discipline, trust, and responsible security practices. ๐— ๐—ถ๐˜€๐˜€๐—ถ๐—ผ๐—ป To help organizations strengthen digital trust through ethical and responsible cybersecurity practices.

  • Independent Cybersecurity Consultant | vCISO | VAPT | Website Security at Upwork
    Nov 2011 - Present ยท 14 yrs 9 mos

    Iโ€™ve been delivering high-impact cybersecurity consulting and strategic advisory services to over 55+ clients worldwide, including startups, CEOs, SaaS platforms, and enterprise web teams. ๐—ž๐—ฒ๐˜† ๐—ฆ๐—ฒ๐—ฟ๐˜ƒ๐—ถ๐—ฐ๐—ฒ๐˜€ ๐—ฃ๐—ฟ๐—ผ๐˜ƒ๐—ถ๐—ฑ๐—ฒ๐—ฑ: โœ” Google Workspace Security Audits โ€“ File-sharing reviews, MFA/SSO enforcement, access controls, DLP rules, and third-party app governance โœ” SaaS Security & Automation โ€“ Role-based access, onboarding/offboarding workflows, license reviews, and API/Zapier automations โœ” vCISO advisory and cybersecurity roadmap development โœ” Penetration Testing (Web, API, Mobile, Cloud) โœ” WordPress Security โ€“ Malware removal, firewall setup, plugin hardening โœ” Incident Response, Patch Management, and Risk Audits โœ” Regulatory Compliance (ISO 27001, GDPR, HIPAA, SOC 2, DPDP, etc.) ๐—–๐—น๐—ถ๐—ฒ๐—ป๐˜ ๐—›๐—ถ๐—ด๐—ต๐—น๐—ถ๐—ด๐—ต๐˜๐˜€: โ€ข Conducted Google Workspace security audits: tightened file-sharing, enforced MFA/SSO, set up DLP, and streamlined onboarding/offboarding for remote teams โ€ข Delivered secure architecture for high-traffic WordPress sites (millions of visitors/month) โ€ข Managed deployments: AWS S3 + CloudFront, Wordfence Pro, security analytics โ€ข Helped CTOs and founders align tech infrastructure with cyber risk strategy ๐—œ๐—ป๐—ฑ๐˜‚๐˜€๐˜๐—ฟ๐˜† ๐—–๐—ผ๐—ป๐˜๐—ฟ๐—ถ๐—ฏ๐˜‚๐˜๐—ถ๐—ผ๐—ป๐˜€: โ€ข Keynote speaker โ€“ Nullcon 2022: โ€œWordPress Security Simplified for Site Ownersโ€ โ€ข Reported critical vulnerabilities to the Website - WordPress core & plugin developers โ€ข Trusted advisor for 150+ CEOs on Upwork and direct channels This 15+ year consulting journey laid the foundation for launching EH1-Infotech Cybersecurity Pvt. Ltd. in 2025 โ€” a structured B2B company built on the same principles of ethical delivery, speed, and trust. Freelance work was independent of any company structure. No financial or legal overlap with EH1-Infotech Cybersecurity Pvt. Ltd.

  • 'WordPress Security Secrets Revealed' Book Author at Notion Press
    Dec 2022 - Jul 2023 ยท 8 mos

    As a highly paid Cyber Security Consultant, I have spent years protecting WordPress websites with millions of traffic worldwide. While I may have kept these secrets to myself. But my mission is to empower the WordPress and cybersecurity community. Boosting the security of over 800+ million existing WordPress sites to create a safer digital world. Together, we'll defend against cyber threats and revolutionize WordPress security. The book was launched with Press Conference & Interaction in Chandigarh. Worried about the security of the WordPress website? Fear not! This comprehensive guide is packed with powerful secrets for protecting your online space. Whether you're a beginner or an experienced WordPress user, this book is a must-have professional toolkit. Inside "WordPress Security Secrets Revealed," you'll discover: โ—ฝ๏ธ Proven strategies to protect your WordPress site from hackers and malicious attacks. โ—ฝ๏ธ A step-by-step guide to implementing strong passwords, two-factor authentication, and secure hosting. โ—ฝ๏ธ Expert tips for choosing and installing trustworthy security plugins to boost your website's defenses. โ—ฝ๏ธ Techniques for easily updating and backing up your WordPress site to ensure its stability and longevity. โ—ฝ๏ธ How to identify and fix vulnerabilities before they become a threat. And, more. This book is an Independent contribution to the WordPress platform for security implementation as a Cybersecurity Consultant. And my work to secure the client's WordPress websites is already independent. I am not representative of WordPress in any official capacity. The book is my independent contribution to implementing Cybersecurity to stop hackers on WordPress Websites that power almost half of the Internet. Further, The trademark WordPress is used under license permission from the WordPress Foundation.

  • EH1-Infotech (Cybersecurity Education โ€“ Partnership Firm) (10 yrs 5 mos)
    • Partner (Inactive since 2020)
      Apr 2010 - Aug 2020 ยท 10 yrs 5 mos

      Founded this education-focused cybersecurity partnership firm during my engineering studies. The firm specialized in awareness programs, industrial training, and workshops for students and academic institutions. โœ” Delivered 350+ seminars and workshops across India โ€” for colleges, police departments, and government agencies โœ” Conducted industrial training (6-week to 1-year) for BCA, MCA, B.Tech, and MBA students โ€” recommended by HODs and universities โœ” Covered SEO, web development, networking, Ethical Hacking, Cybersecurity, and Digital Marketing โœ” Achieved 100% placement for trained students in IT companies globally This firm was focused purely on training and did not provide commercial cybersecurity services to businesses. It became inactive in 2020. ๐—”๐—น๐—น ๐—ฝ๐—ผ๐˜€๐˜-๐Ÿฎ๐Ÿฌ๐Ÿฎ๐Ÿฌ ๐—น๐—ฒ๐—ด๐—ฎ๐—น ๐—ณ๐—ถ๐—น๐—ถ๐—ป๐—ด๐˜€ ๐—ต๐—ฎ๐˜ƒ๐—ฒ ๐—ฏ๐—ฒ๐—ฒ๐—ป ๐—บ๐—ฎ๐—ถ๐—ป๐˜๐—ฎ๐—ถ๐—ป๐—ฒ๐—ฑ ๐—ฎ๐˜€ ๐—ฝ๐—ฒ๐—ฟ ๐—ฐ๐—ผ๐—บ๐—ฝ๐—น๐—ถ๐—ฎ๐—ป๐—ฐ๐—ฒ. ๐—ก๐—ผ๐˜ ๐—น๐—ฒ๐—ด๐—ฎ๐—น๐—น๐˜† ๐—ผ๐—ฟ ๐—ณ๐—ถ๐—ป๐—ฎ๐—ป๐—ฐ๐—ถ๐—ฎ๐—น๐—น๐˜† ๐—น๐—ถ๐—ป๐—ธ๐—ฒ๐—ฑ ๐˜๐—ผ ๐—˜๐—›๐Ÿญ-๐—œ๐—ป๐—ณ๐—ผ๐˜๐—ฒ๐—ฐ๐—ต ๐—–๐˜†๐—ฏ๐—ฒ๐—ฟ๐˜€๐—ฒ๐—ฐ๐˜‚๐—ฟ๐—ถ๐˜๐˜† ๐—ฃ๐˜ƒ๐˜. ๐—Ÿ๐˜๐—ฑ., which was incorporated in April 2025 with a distinct B2B focus and new structure.

    • Speaker for Ethical Hacking | Cyber Security Workshops, Seminars, TV, FM, Conferences & Webinars
      Apr 2010 - Jun 2020 ยท 10 yrs 3 mos

      Served as a national speaker on cybersecurity awareness, ethical hacking, and digital risk education. Delivered ๐Ÿฏ๐Ÿฑ๐Ÿฌ+ ๐—น๐—ถ๐˜ƒ๐—ฒ ๐˜„๐—ผ๐—ฟ๐—ธ๐˜€๐—ต๐—ผ๐—ฝ๐˜€, ๐˜€๐—ฒ๐—บ๐—ถ๐—ป๐—ฎ๐—ฟ๐˜€, ๐—ฎ๐—ป๐—ฑ ๐˜„๐—ฒ๐—ฏ๐—ถ๐—ป๐—ฎ๐—ฟ๐˜€ at schools, colleges, corporates, police departments, and government institutions across India. ๐—ž๐—ฒ๐˜† ๐—–๐—ผ๐—ป๐˜๐—ฟ๐—ถ๐—ฏ๐˜‚๐˜๐—ถ๐—ผ๐—ป๐˜€ โ€ข Trained over ๐Ÿญ๐Ÿฌ,๐Ÿฌ๐Ÿฌ๐Ÿฌ ๐˜€๐˜๐˜‚๐—ฑ๐—ฒ๐—ป๐˜๐˜€, ๐—ฒ๐—ป๐˜๐—ฟ๐—ฒ๐—ฝ๐—ฟ๐—ฒ๐—ป๐—ฒ๐˜‚๐—ฟ๐˜€, ๐—ฎ๐—ป๐—ฑ ๐—ผ๐—ณ๐—ณ๐—ถ๐—ฐ๐—ถ๐—ฎ๐—น๐˜€ in cyber hygiene, ethical hacking, and internet safety โ€ข Built early awareness on digital threats and responsible internet useโ€”before cybersecurity became mainstream โ€ข Delivered structured programs for engineering and management students in collaboration with HODs and universities ๐—ฆ๐—ฝ๐—ฒ๐—ฐ๐—ถ๐—ฎ๐—น ๐—œ๐—ป๐˜ƒ๐—ถ๐˜๐—ฒ๐˜€ โ€ข ๐—š๐˜‚๐—ฒ๐˜€๐˜ ๐—ฆ๐—ฝ๐—ฒ๐—ฎ๐—ธ๐—ฒ๐—ฟ โ€“ Roundtable on Bitcoin Policy in India, hosted by PHD Chamber of Commerce, New Delhi (2017) ๐—ก๐—ผ๐˜๐—ฒ: This was part of the educational wing under the EH1-Infotech partnership firm, which became inactive in 2020. ๐—”๐—น๐—น ๐—น๐—ฒ๐—ด๐—ฎ๐—น ๐—ณ๐—ถ๐—น๐—ถ๐—ป๐—ด๐˜€ ๐—ฝ๐—ผ๐˜€๐˜-๐Ÿฎ๐Ÿฌ๐Ÿฎ๐Ÿฌ ๐—ต๐—ฎ๐˜ƒ๐—ฒ ๐—ฏ๐—ฒ๐—ฒ๐—ป ๐—บ๐—ฎ๐—ถ๐—ป๐˜๐—ฎ๐—ถ๐—ป๐—ฒ๐—ฑ ๐—ฎ๐˜€ ๐—ฝ๐—ฒ๐—ฟ ๐—ฐ๐—ผ๐—บ๐—ฝ๐—น๐—ถ๐—ฎ๐—ป๐—ฐ๐—ฒ. ๐—ก๐—ผ ๐—น๐—ฒ๐—ด๐—ฎ๐—น ๐—ผ๐—ฟ ๐—ผ๐—ฝ๐—ฒ๐—ฟ๐—ฎ๐˜๐—ถ๐—ผ๐—ป๐—ฎ๐—น ๐—ฐ๐—ผ๐—ป๐˜๐—ถ๐—ป๐˜‚๐—ถ๐˜๐˜† ๐—ฒ๐˜…๐—ถ๐˜€๐˜๐˜€ ๐˜„๐—ถ๐˜๐—ต ๐—˜๐—›๐Ÿญ-๐—œ๐—ป๐—ณ๐—ผ๐˜๐—ฒ๐—ฐ๐—ต ๐—–๐˜†๐—ฏ๐—ฒ๐—ฟ๐˜€๐—ฒ๐—ฐ๐˜‚๐—ฟ๐—ถ๐˜๐˜† ๐—ฃ๐˜ƒ๐˜. ๐—Ÿ๐˜๐—ฑ.., which was launched in 2025 as a new B2B entity.

  • Partner (Inactive Since 2019) at Technology Certified (Tech Consulting โ€“ Partnership Firm)
    Jan 2016 - Dec 2019 ยท 4 yrs

    Managed this small-scale tech consulting and academic training parternship firm focused on ๐—ฒ๐—ป๐˜๐—ฟ๐˜†-๐—น๐—ฒ๐˜ƒ๐—ฒ๐—น ๐—œ๐—ง ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ถ๐—ฐ๐—ฒ๐˜€, ๐˜€๐˜๐˜‚๐—ฑ๐—ฒ๐—ป๐˜ ๐˜‚๐—ฝ๐˜€๐—ธ๐—ถ๐—น๐—น๐—ถ๐—ป๐—ด, ๐—ฎ๐—ป๐—ฑ ๐—น๐—ผ๐—ฐ๐—ฎ๐—น ๐—ฑ๐—ถ๐—ด๐—ถ๐˜๐—ฎ๐—น ๐˜€๐—ผ๐—น๐˜‚๐˜๐—ถ๐—ผ๐—ป๐˜€. ๐—ž๐—ฒ๐˜† ๐—”๐—ฟ๐—ฒ๐—ฎ๐˜€ ๐—ผ๐—ณ ๐—ช๐—ผ๐—ฟ๐—ธ: โ€ข Website development and basic IT support โ€ข Student-focused digital training initiatives โ€ข Tech workshops for small institutions and learners ๐—œ๐—บ๐—ฝ๐—ผ๐—ฟ๐˜๐—ฎ๐—ป๐˜ ๐—ก๐—ผ๐˜๐—ฒ: All post-2020 legal filings have been maintained as per compliance. Not legally or financially linked to ๐—˜๐—›๐Ÿญ-๐—œ๐—ป๐—ณ๐—ผ๐˜๐—ฒ๐—ฐ๐—ต ๐—–๐˜†๐—ฏ๐—ฒ๐—ฟ๐˜€๐—ฒ๐—ฐ๐˜‚๐—ฟ๐—ถ๐˜๐˜† ๐—ฃ๐˜ƒ๐˜. ๐—Ÿ๐˜๐—ฑ., which is a newly incorporated, enterprise-focused private limited company launched in April 2025.