Skip to content
Contact Us
Flagship · GovTech
India Post — grievance system

Pan-India, awarded via GeM (Nov 2025).

Read →
Flagship · GovTech
India Post — grievance system

Pan-India, awarded via GeM (Nov 2025).

Read →
Global delivery
India · Belgium · UK

Three offices, three time zones.

→

Zero-trust architecture that verifies every access request.

Mindrops designs and implements zero-trust architecture — identity-first access, least privilege, micro-segmentation and continuous verification — so a breach in one place doesn’t become a breach everywhere.

Clients

  • Cushman & Wakefield
  • Pacific Group
  • DLF Group
  • Barbeque Nation
  • The Coffee Bean & Tea Leaf

Selected projects

A selection of the software Mindrops has designed and engineered for clients.

SaaS · Influencer Marketing

Activate by Bloglovin'

A dedicated onshore and offshore Mindrops team built, upgraded and maintained the platform with Agile delivery — campaign matching, messaging and real-time reporting.

Maintained for 4+ years, scaling to 130,000+ influencers and 100,000+ brands on a network serving 16M+ users a month.

Quick Commerce · Logistics

RocketZone — Rider Delivery App

A custom Android rider app with real-time order assignment, Google Maps navigation, COD collection tracking, returns and exchange pickups, and delivery proof.

Designed, built, tested and deployed between January and June 2026.

Total post offices1,65,000The largest postal network in the world

Government · GovTech

India Post — Grievance Redressal

An AI-automated platform on Mindrops’ LazyMonkey foundation that categorises, prioritises, routes and auto-responds to every grievance, with one SLA-tracked record for central and regional teams.

Awarded via GeM (Nov 2025), it auto-triages thousands of grievances a day for a network of 1.5 lakh+ post offices.

Zero-trust architecture services

Mindrops designs and implements zero-trust architecture — identity-first access, least privilege, micro-segmentation and continuous verification — across applications, cloud and infrastructure. The model trusts no user, device or network by default and verifies every access request continuously, so one breach does not become a breach everywhere.

Identity-first access

Strong authentication, MFA and conditional access as the new perimeter — for users and services alike.

Least privilege

Just-enough, just-in-time access so a compromised account can reach only what it must.

Micro-segmentation

Network and workload segmentation that contains blast radius and stops lateral movement.

Continuous verification

Every request re-evaluated on identity, device posture and context.

Workload & cloud

Zero-trust extended to services, APIs and cloud workloads as well as user logins.

Monitoring & policy

Centralised policy and telemetry so access decisions are consistent, logged and auditable.

Who we build zero-trust architecture for

Hybrid and remote workforces

Staff, contractors and partners connecting from anywhere, where VPN access grants far more reach than each person needs.

Flat networks and shared credentials

Environments where one stolen password or compromised server could move laterally across most of the estate.

Cloud and microservice estates

Services and APIs calling each other across clouds and clusters without strong service identity or authenticated, encrypted connections.

Standing third-party access

Vendors and integrators with long-lived access to production systems that is rarely reviewed or revoked.

Why Mindrops for zero-trust architecture

Sequenced for early impact
We start where risk concentrates — usually identity, MFA and privileged access — so protection improves from the first phase of the programme.
Users and workloads together
Service identity, mutual TLS and segmentation cover APIs and cloud workloads as well as employee logins.
Policies tested on real user journeys
Access policies are tested against real user journeys, so stronger verification doesn’t push staff into risky workarounds.
Auditable access decisions
Access policy is centralised and every decision logged, giving security teams and auditors one place to see who reached what, and why.
Technologies we use
Identity
SSO · MFA · Conditional access · SCIM
Network & workload
Micro-segmentation · Service mesh · mTLS
Cloud
AWS · Azure · GCP · Posture management
Standards
NIST 800-207 · OWASP

Client reviews

Extra capacity for software and cloud

A Mindrops team working alongside the client’s own engineers on software development and cloud-based projects, brought in to add reliable delivery capacity.

From the client’s review

“Mindrops handled complex requirements with ease and added value throughout the project.”
Harsh BihaniHead of Technology, Qzaark IndiaRead full review on Sortlist

Recruitment & candidate management

A recruitment platform with candidate registration, applications, admit cards and a central admin dashboard.

From the client’s review

“They designed it to handle high concurrent traffic during active recruitment drives, which was critical for us.”
AnujDirector, NIA Aviation Services Pvt. Ltd.Read full review on GoodFirms

Recruitment site maintenance

An annual maintenance contract to stabilise an aviation recruitment website and fix its online application workflow, which has to hold up during active hiring drives.

From the client’s review

“Most aviation candidates apply through phones, and the fixes to the application flow reflected a practical understanding of that, not just surface-level design changes.”
SuryaDirector, Bhartiya Aviation ServicesRead full review on Sortlist

Warehouse operations platform

A field app and web admin panel connecting material records, site expenses and reporting across warehouse locations.

From the client’s review

“Reporting that used to take a full day of compiling sheets is now a filtered download from the admin panel.”
Amit AgarwalDirector, Footprint WarehousingRead full review on Clutch

Fintech lending platform

A customer app, vendor app and admin panel from one team, with KYC, CIBIL credit checks and automated loan approvals.

From the client’s review

“Fintech projects have a lot of layers and it was good to work with a team that understood the credit and lending side of things.”
Shyam AryaDirector, Insto Fin Private LimitedRead full review on Sortlist

Rural telehealth platform

A mobile app, website and admin dashboard connecting patients in rural and semi-urban India with doctors, with video consultations, digital prescriptions and patient registration.

From the client’s review

“The UI/UX design process was collaborative and they kept the end user in mind throughout, which mattered a lot for a platform targeting rural users.”
Rama RamanDirector, EonMedRead full review on Sortlist

More client reviews

How a zero-trust rollout runs

  1. 01 — Map

    Assets, identities and flows

    Inventory users, devices, applications and data flows, and map who and what can reach each critical system today.

  2. 02 — Design

    Target architecture and policy

    Define the target state against NIST SP 800-207 — identity provider, access policies, segmentation and telemetry.

  3. 03 — Implement

    Phased rollout

    Roll out MFA, conditional access, least privilege and segmentation in phases, piloting with one group or application before scaling.

  4. 04 — Verify

    Monitor and refine

    Watch access telemetry, tune policies and test that segmentation really contains lateral movement.

Frequently asked questions

What is zero-trust architecture?
A security model that assumes no user, device or network is trusted by default. Every access request is verified continuously on identity, device posture and context, and network location on its own grants no access.
Where does a zero-trust rollout start?
Usually with identity and access — strong authentication, MFA and least privilege — then micro-segmentation and continuous verification. Mindrops assesses the environment and sequences the highest-impact steps first.
Can zero-trust apply to cloud workloads as well as users?
Yes. Mindrops extends zero-trust to services, APIs and cloud workloads with mutual TLS, service identity and segmentation.
Does this align to a standard?
Yes. Mindrops aligns zero-trust designs to NIST SP 800-207, with access policy and logging that are auditable.
How does this fit with wider security?
It is part of it. See the cybersecurity and compliance & governance services.

Contact us

Tell us how users, partners and services reach your systems today. We will reply within one business day with where a zero-trust rollout should start.

Book a security review

An engineer will respond within one business day.

Have a defined scope? Get a quote

We use essential cookies to run this site. Analytics and marketing cookies are optional.