MMG INFOTECH PRIVATE LIMITED
🏢 Company Overview
MMG Infotech Private Limited is a 🏢 Government-empaneled, MSME-registered software development and IT solutions company, incorporated in 2021 under the Companies Act, 2013. Since 2021, we specialize in developing mission-critical, AI-powered, secure, and scalable software applications for Government Departments, Law Enforcement Agencies, Educational Institutions, and Private Enterprises across India.
We are a registered seller on the Government e-Marketplace (GeM) and have successfully executed numerous contracts for Central and State Government agencies. Our solutions are currently operational across 50+ government agency deployments.
| Company Name | MMG Infotech Private Limited |
| CIN | U72200UP2021PTC142703 |
| GSTIN | 09AA0CM3659A1ZB |
| PAN | AAOCM3659A |
| MSME / Udyam | UDYAM-UP-29-0023635 |
| GeM Seller ID | 0NXB210003298462 |
| Year of Incorporation | 2021 |
| Registered Office | A-4, F-2, First Floor, Swaroop Park, Lajpat Nagar, Sahibabad, Ghaziabad, UP - 201005 |
| Directors | Mr. Gaurav Sharma (DIN: 09088634) Ms. Pooja Shokeen (Director) |
| Contact | +91-971-607-0908 | gaurav@mmginfotech.com |
💻 Core Technical Expertise
- Programming & Frameworks: ASP.NET, .NET Core 9, C#, Node.js v24, Express.js, Python, FastAPI, React 19, Vite, HTML5, CSS3, JavaScript, jQuery, Bootstrap, TailwindCSS 4
- Database: PostgreSQL, MySQL, MS SQL Server, SQLite, Redis, Entity Framework Core
- Server & Hosting: IIS, Nginx, PM2 Cluster, Windows Server, RDP Gateway & Session Management
- Cloud & AI: GCP, Gemini 2.5 Flash, Anthropic Claude, Ollama, TensorFlow.js, Vision AI, Generative AI
- Security: Zero Trust, AES-256-CBC, SSL/TLS, WireGuard, WAF, IDS/IPS, Anti-Tamper, RBAC, MFA, VAPT Grade A
- Desktop & Mobile: Electron, WPF, Android, iOS
- Specialized: Tesseract.js OCR, Puppeteer PDF, ElevenLabs Voice, Razorpay, HLS Video, FFmpeg
- Government: Registered GeM Seller — Software Support Services 2.0
📦 Product Suite
India's first comprehensive AI-powered policing automation platform. Fully compliant with BNSS 2023. Built on Node.js v24, React 19, PostgreSQL, Redis with Gemini 2.5 Flash AI. 14-tier RBAC, multi-tenant, bilingual (Hindi/English). Live at drishti.mmginfotech.com.
24 UP Police districts + 6 CBI offices. Evidence registration, barcode/QR, chain-of-custody, judicial disposal, audit trails. Being integrated into DRISHTI.
Python 3.14 FastAPI + React 19. 28 scan modules including SAST, DAST, Network, API, Mobile (APK), Cloud (AWS/Azure/GCP), DNS, Supply Chain/SBOM, Server Hardening (47 checks). 3 AI models (Gemini 2.5 Flash + Claude + Ollama) with multi-model voting. 5 AI red team personas. 4-layer false positive elimination with source code verification. Code intelligence with taint tracking across 7+ languages (Python, JS/TS, Java, C#, PHP, Go, Ruby). 10 compliance frameworks (OWASP, CERT-IN, ISO 27001, PCI-DSS, NIST, DPDPA, RBI, SEBI, CIS, HIPAA). Genetic fuzzing with 50K+ evolving payloads. CVSS 3.1 scoring. Attack chain discovery. SOC 2 compliance audit. Automated VAPT report generation with digital signature.
100% Indian WireGuard. ChaCha20-Poly1305. Device fingerprinting, IDS, honeypots, kill switch, GeoIP India-only, MFA, immutable logs (365 days). DPDPA. 96/100.
B2B license lifecycle. Razorpay+GST. Hierarchical clients (state/district/station). AES-256 + hardware-bound.
ASP.NET Core + React 19 + WPF. SSO, concurrent RDP, WebSocket tunnel, Zero-Trust license, Anti-Tamper, Redis, CPU/Memory isolation, AD provisioning.
K-12 LMS. AI MCQ, career AI, facial proctoring, HLS video, WhatsApp 2FA, multi-role.
Visitor funnel, heatmaps, compliance, showroom analytics.
Billing, complaints, visitors, financial reporting.
📜 Government Contracts & Work Orders
Select contracts executed / under execution via the Government e-Marketplace (GeM):
| # | Office / Location | GeM Contract No. | Service |
|---|---|---|---|
| 1 | CBI, ACB Ghaziabad, UP | GEMC-511687782019977 | Software Support Services |
| 2 | CBI, ACB Hyderabad, Telangana | CBI/ACB/HYD/2024/542 | Digital Malkhana Software |
| 3 | CBI, ACB Mumbai, Maharashtra | GEMC-511687704016409 | Software Support Services |
| 4 | CBI, EOB Mumbai, Maharashtra | GEMC-511687733153349 | Software Support Services |
Digital Malkhana Software deployed at Central Crime Station (CCS), Detective Department, Hyderabad. Approved by Addl. Commissioner of Police, Crimes.
| # | District / Office | Product / Service Deployed |
|---|---|---|
| 1 | SSP Saharanpur | DRISHTI Suite (Pragya + Malkhana + GD + Mahila Beat) |
| 2 | SP Azamgarh | DRISHTI Suite (Pragya + Malkhana + Mahila Beat + Patrawali) |
| 3 | SP Varanasi | Digital Malkhana |
| 4 | SP Muzaffarnagar | Digital Malkhana + Pragya |
| 5 | SP Chandauli | Digital Malkhana + Pragya |
| 6 | SP Ghazipur | Digital Malkhana + Pragya |
| 7 | SP Jalaun | Digital Malkhana + Pragya |
| 8 | SP Hardoi | Digital Malkhana + Pragya |
| 9 | SP Lalitpur | Digital Malkhana + Pragya |
| 10 | SP Bhadohi | Digital Malkhana + Pragya |
| 11 | SP Unnao | Digital Malkhana + Pragya |
| 12 | SP Shamli | Mahila Beat System |
🇮🇳 Pan-India Operational Presence
👥 Team Strength & Capabilities
Our team comprises 7 skilled professionals with deep domain expertise in:
- Law Enforcement Technology & Police Workflow Automation
- Evidence Management & Chain-of-Custody Systems
- GeM Procurement & Government Compliance
- Cloud Computing & AI/ML Integration
- Cybersecurity, VAPT & Penetration Testing
- Enterprise Application Development
- Desktop & Mobile Development
📄 Registrations & Certifications
⭐ Why MMG Infotech?
🎯 Objective & Scope
MMG Infotech Pvt Ltd is committed to the highest standards of privacy, integrity, and confidentiality. We develop sensitive solutions for CBI (6 offices), UP Police (24 districts), Delhi Police, Telangana Police, Haryana Police, and MP Police. Our products handle investigation data, digital evidence, criminal case files, and citizen grievances. We have achieved VAPT Grade A (89%) and operate our own AI-powered VAPT platform (MMG CyberShield).
🔒 Data Confidentiality & Non-Disclosure
- Strict non-disclosure. All code, investigation records, evidence data kept strictly confidential.
- No disclosure to unauthorized third parties under any circumstances.
- All team members bound by internal NDAs.
- Highest data compartmentalization for CBI/Police data.
- Ready to sign formal NDAs with all partners.
- DPDPA 2023 compliant.
🛡 Zero Trust Security Architecture
- Never Trust, Always Verify: Every access request verified.
- MFA: Google Authenticator TOTP + OTP.
- No Implicit Trust: No user/device/network trusted implicitly.
- Micro-Segmentation: Resources segmented to limit lateral movement.
- Device Fingerprinting: Hardware-bound licensing.
- One-Device Policy: Prevents concurrent sessions.
- Anti-Tamper: Binary runtime protection in MMG-Plus.
🔐 Encryption & Cryptographic Standards
- Data at Rest: AES-256-CBC encryption.
- Data in Transit: SSL/TLS 1.2/1.3.
- VPN: WireGuard ChaCha20-Poly1305.
- License Codes: AES-256 + RSA-signed.
- Passwords: bcrypt with salt.
- Databases: Encrypted at rest and in transit.
⛰ Secure Hosting & Infrastructure
- Web Servers: Hardened IIS + Nginx with WAF.
- Deployment: PM2 cluster, zero-downtime.
- Firewall & IDS/IPS with honeypots.
- Kill Switch: Auto connection termination.
- GeoIP: India-only for government apps.
- Patch Management: Latest security patches.
- Backups: Daily encrypted, integrity verified.
- Session Isolation: Per-user CPU/Memory limits.
🔑 Access Control & Authorization
- RBAC: 14-tier role system.
- Least Privilege: Need-to-Know access.
- Audit Trails: Tamper-proof with checksums.
- Immutable Logs: 365-day retention, CSV/PDF export.
- IP Controls: Whitelist/blacklist.
- Sessions: 15-min timeout, device-bound, credential flushing.
- Brute-Force: 5-tier rate limiting + lockout.
🛠 Application Security (Secure SDLC)
- VAPT Grade A: 89% score.
- Own VAPT: MMG CyberShield — SAST, DAST, 5 AI red teams.
- OWASP Top 10 compliance.
- Secure Coding: Validation, CSRF protection.
- Code Reviews: Mandatory before production.
- 536+ automated tests.
- Dependency scanning for third-party vulnerabilities.
- Anti-Tamper + license heartbeat verification.
🗃 Evidence & Sensitive Data Handling
- Chain-of-custody protocols for all evidence data.
- Tamper-proof audit trails.
- Evidence compartmentalization.
- ⚖ BNSS 2023 compliant data handling.
- BNSS 135(6) automated detention alerts.
- AI-powered fraud detection in case management.
📡 VPN & Secure Communications
- WireGuard ChaCha20-Poly1305 encryption.
- 100% self-hosted, Made in India, zero external APIs.
- DPDPA 2023 compliant.
- Device fingerprinting, max 2 devices/user.
- IDS + honeypots for threat detection.
- Kill switch for auto termination.
- GeoIP India-only blocking.
- 96/100 security score.
⚖ Legal & Regulatory Compliance
- Information Technology Act, 2000.
- IT (Reasonable Security) Rules, 2011.
- DPDPA 2023.
- BNSS 2023.
- GeM GTC/STC compliance.
- CIS, NIST, OWASP frameworks.
🚨 Incident Response & Management
- Immediate Response: Investigate, contain, remediate.
- Notification: Prompt to all stakeholders.
- RCA: Root cause analysis for every incident.
- Report: Timeline, impact, corrective actions.
- 24x7: 1-hour response for critical incidents.
- AI: Automated anomaly detection.
🎓 Employee Security Awareness
- Security orientation at onboarding.
- Periodic training sessions.
- Enhanced background verification for government data handlers.
- Clear desk and clear screen policies.
- No personal devices for production access.
- Internal NDAs signed by all team members.
We, MMG Infotech Private Limited, hereby declare that all above policies are actively implemented. As a 🏆 VAPT Grade A certified technology partner of CBI and multiple State Police departments, we understand the gravity of information security.
We are fully prepared to:
- Sign formal Non-Disclosure Agreements
- Undergo security audits as required
- Share VAPT certification reports
- Comply with any additional security requirements
