Prathamesh Bakliwal

Founder @ Secure Sleuths

About

Most SaaS companies don't find out they were breached. They find out they've been breached. For months. Logs were flowing. Alerts were firing. Someone assumed someone else was watching. Nobody was. I've seen this same pattern across every SaaS company I've worked with - teams of 20, 50, 100 people. Real customers. Real revenue. Real risk. Running on what I call hope-based security: dashboards that look green while 14% of devices have silently stopped sending logs. The attacker doesn't announce themselves. They move quietly through the gaps your tools don't know about. By the time the breach surfaces - through a customer complaint, a failed audit, or a ransom note - it's been in progress for weeks. I built Secure Sleuths because enterprise security tools were solving the wrong problem. They were priced for companies with dedicated security teams and built for infrastructure that looks nothing like a scaling SaaS stack. A $150k SIEM with EPS caps and a fixed integration list doesn't help a 40-person team running 15 different tools, a custom Kubernetes setup, and their own ticketing system. So I built the alternative - a stack that connects to everything they actually use, pulls every log source, integrates directly into their existing workflow, and costs a fraction of the price. Same outcomes. Built for how SaaS companies are actually built. Including integrating directly into whatever ticketing system your team already runs - Jira, Jitbit, Linear - so security alerts land in your existing workflow, not a separate dashboard nobody checks. What I actually do: I deploy and operate a lean, open-source SOC (Wazuh + TheHive + MISP) for SaaS teams of 10–200. Fully managed. Retainer-based. Always on. In the first 30 days, clients typically see: → 100% log coverage - including sources enterprise SIEMs can't ingest → Daily alerts cut from 400,000+ down to ~200 actionable signals → 70–80% reduction in licensing costs vs enterprise tools → Direct integration with their existing ticketing - Jira, Jitbit, or their own system - so alerts flow into workflows their team already uses → Audit-ready evidence packs for ISO 27001, investor reviews, and board questions This isn't about adding another dashboard to babysit. It's about having a real answer when someone asks: "Are we okay right now?" If you're a SaaS founder or CTO responsible for security with no dedicated team beneath you and you're not certain your monitoring is actually working DM me VISIBILITY. I'll send you the same 2-minute diagnostic I run before every client conversation.

Country

India

City

Nashik

Industry

Computer & Network Security

Skill

Managed SOC, Security Operations (SOC), Threat Detection & Incident Response, ISO 27001 Compliance, SIEM Implementation, Help clients save $$$$ on SOC licensing, Security Operations, Security Monitoring, Python (Programming Language), TLS , Compliance, PKI, Rest API, ACME, Digital Trust, authentication, Certificates, Enterprise PKI, S/MIME, Network Security

Experience

Founder

Secure Sleuths

2024-9 - Present · 2 yrs 1 mo

I work directly with SaaS founders and CTOs who are scaling fast and realizing security is no longer something they can ignore or outsource to hope. What this looks like in practice: → Deployed 12+ open-source SOCs for SMEs, typical delivery in 30 days → Reduced alert noise from 100k–400k/day down to ~200 actionable signals per client → Built ISO-ready evidence packs and response playbooks → Cut tooling and licensing costs by 70–80% without reducing coverage → Designed automated snapshot and recovery systems for zero-downtime visibility The work isn't glamorous. It's methodical, structured, and boring in the best way possible, because when security is done right, nothing dramatic happens.

Security Analyst

CyberXchange

2023-2 - 2024-9 · 1 yr 8 mos

Where I built the operational foundation I now use with clients. Patched 300+ vulnerabilities in a single campaign, implemented SIEM for a hotel chain, developed CIS-based hardening standards across Windows, Linux, firewalls and AWS, and supported ISO 27001 policy drafting.

SOC Intern

CyberXchange

2022-11 - 2023-1 · 3 mos

● Conducted in-depth investigations into attack vectors, including SQL injection and XSS, contributing valuable insights to incident response strategies. ● Assisted with implementing and maintaining ISO 27001 standards, patch management, and vulnerability management protocols. ● Collaborated with senior security analysts to analyze and respond to security incidents, further developing incident response and threat mitigation skills.

Ethical Hacking Intern

CyberXchange

2022-7 - 2022-10 · 4 mos

Remote

Applied ethical hacking techniques in controlled environments, testing vulnerable labs, and overcoming challenges on platforms like TryHackMe. ● Identified security weaknesses in Android applications through thorough analysis and testing, improving application security protocols. ● Gained practical skills in ethical hacking methodologies and tools, crucial for effective cybersecurity practices.

Security Researcher

Freelance | Self-Employed

2020-1 - 2022-10 · 2 yrs 10 mos

● Discovered numerous critical security vulnerabilities in web applications, including XSS, SQL injection, information disclosures, and SSRF, leading to enhanced client system security. ● Conducted penetration testing for 10+ clients, assessing networks, web applications, and Android applications. ● Collaborated with clients to identify vulnerabilities and recommend remediation strategies, gaining a reputation for delivering actionable cybersecurity insights. ● Identified over 10 critical, 20 high, and more than 50 medium to low severity findings. ● Exploited 3+ Common Vulnerabilities and Exposures (CVEs) across multiple projects. ● Key Projects: ● Pre-launch testing of a Driver's Platform (Web and Android). ● Web testing of an AI tool (MVP and Beta Phase) for hardware product engineering. ● Network testing for a CA Firm. ● Network and web testing for a college.