Tier 1 — Single App Pilot: ₹60,000 – ₹1,50,000 (2–4 weeks). Tier 2 — Web + Mobile Rollout: ₹2,00,000 – ₹5,50,000 (6–10 weeks). Tier 3 — Enterprise IAM Modernization: ₹6,00,000 – ₹15,00,000 (3–5 months). Tier 4 — Regulated / Bank-Grade: ₹18,00,000+ (5+ months).
Phase 1 — Pilot: Optional passkeys for one low-risk user segment (2–4 weeks). Phase 2 — Dual-mode rollout: Passkeys default, password/OTP visible fallback (4–8 weeks). Phase 3 — Password deprecation: Nudge remaining users; disable reset where passkey active (2–6 months). Phase 4 — Monitoring: Track failures/recovery usage by device type (Ongoing).
Score your business against five factors: how sensitive the data behind this login is, how diverse your users' devices and browsers are, how much regulatory pressure (DPDP, RBI, SOC 2) you're already facing, how much legacy IAM/SSO debt you're carrying, and whether you can resource a 2–4 quarter phased migration rather than a single sprint. Two or more "high urgency" answers mean you should scope Tier 3 now rather than starting with a minimal pilot.
CloudCloud misconfiguration is the 3rd most common breach entry point — and it takes 251 days on average to catch. Here's what it costs to fix that in India in 2026, where the average data breach now runs ₹25.5 crore (IBM).
AIEnterprise AI investment in India grew 119% in the past year — but only 22% of Indian companies have the testing, auditing, and risk-assessment processes to govern what they've deployed.
IndustryConcentric security layers for SaaS in 2026 — the controls checklist that unlocks enterprise sales, and real breach and audit cost benchmarks.
Book a free consultation and we'll map this framework to your project — no fluff, no sales pressure.