Salvaged a stalled ClearPass rollout
A private-sector bank's vendor-led NAC had stalled for months. Re-implemented on the PVESIC discipline — authentication incidents down ~70%, production sign-off in 12 weeks.
Read the case →
Network Access Control · Enterprise India
Every NAC failure is an implementation problem.
Vendor-agnostic NAC consulting for Indian enterprises.
28 years in the trenches.
We implement
- FortiNAC
- Aruba ClearPass
- Forescout
- Cisco ISE
- Ruckus Cloudpath
Results · Selected work
See all case studies →
NAC that shipped — and stayed shipped.
Segmented OT from IT across 6 plants
Flat networks put production lines one bad laptop away from downtime. Rolled out Cisco ISE segmentation aligned to the plant risk model — zero unplanned OT outages since cut-over.
Read the case →Passed an ISO 27001 NAC audit, first attempt
An IT services firm had no defensible NAC evidence ahead of certification. Built the PVESIC evidence pack in 6 weeks — cleared the access-control controls with zero non-conformities.
Read the case →We had written the platform off. Pavak proved the product was fine — our implementation wasn't. Ninety days later it just works, quietly, the way NAC is supposed to.
01 — What we do
Four services.
Four services.
Five platforms.
One discipline.
Everything we do starts from a network access perspective. We don't do general cybersecurity. We do NAC, and we do it across the five platforms Indian enterprises actually deploy.
Implementation
Design, deploy, integrate NAC into existing network fabric. Typical engagement: 8–16 weeks.
Learn more →Troubleshooting
Diagnose broken deployments using the R-P-Po-V-E-A framework. Typical engagement: 2–6 weeks.
Learn more →Audit readiness
NAC controls for ISO 27001, PCI DSS, RBI reviews using the PVESIC framework. 4–8 weeks.
Learn more →Vendor selection
Cross-platform evaluation matrix and TCO projection. 2–4 weeks.
Learn more →
02 — Methodology · Audit
PVESIC
Six dimensions of NAC audit readiness
- PPolicyWhat the network should permit, by whom, under what conditions.
- VVisibilityWhat's on the network. Known, unknown, managed, unmanaged.
- EEnforcementThe action taken when a policy is violated.
- SSegregationNetwork segmentation aligned with the business's risk model.
- IIncident ResponseWhat happens when enforcement fires.
- CChange ManagementHow policy changes flow from approval to network state.
03 — Methodology · Troubleshooting
R · P · Po
R · P · Po
V · E · A
A six-step troubleshooting decision tree — followed in order, top to bottom.
- R RADIUS Is the supplicant even reaching RADIUS?
- P Profile Is the device being correctly profiled?
- Po Policy Is the right policy being matched?
- V VLAN Is the right VLAN being returned?
- E Enforce Is the enforcement point honouring the VLAN?
- A Audit Is any of this being logged for later review?
The product was never the problem. The implementation was.
Peeyush Trivedi
Founder · 28 years in enterprise network security
- CISSP
- Vendor-agnostic
- 5 NAC platforms
04 — Why Pavak
Three things that matter.
01
Vendor-agnostic
No licence kickbacks. We recommend what fits your environment, and we say so in writing.
02
28 years, not 28 slides
Every framework on this page was forged in a real deployment. None of it was invented for a pitch deck.
03
Implementation-first
We don't sell products. We charge for execution. Our margin depends on deployments that work.
Free · No sales call
Not ready to talk? Grade your own NAC first.
A one-page, 13-point self-assessment built on our PVESIC framework. Tick what's true of your environment, read your score, and know exactly where you stand — before you spend a rupee.
- 13 questions across the six PVESIC dimensions
- An instant maturity score you can take to your CISO
- No login, no spam — one PDF