Ishan Saha is the Co-Founder of RNT Infosec LLP, a cybersecurity company focused on information security, cyber risk management, and digital resilience for modern businesses.
Discover how RNT Infosec is transforming secure code review with AI-powered knowledge graphs that reduce false positives and uncover real-world vulnerabilities. Learn how the Kolkata-based cybersecurity startup is helping developers and enterprises build more secure software with proprietary AI.
Written by TFN Research Desk | Reviewed by TFN Editorial Team
Quick Facts
Ishan Saha: Over 8 years of experience in technical security audits, including red team simulations, vulnerability assessments, penetration testing, and code reviews. Certifications include OSCP, CISA, CRTP, CEH, and ISO 27001. Occupation: Co-founder, RNT Infosec LLP. Stage: Prototype based / Pre-launch.
Table of Contents
- Introduction
- The RNT Infosec Story
- The Problem and the Solution
- Business Model and Target Market
- Traction and Milestones
- Building With Intention
- Competitive Positioning
- Lessons From the Journey So Far
- Vision and Next Steps
- Key Takeaways
- FAQs
Introduction
Ishan Saha is building RNT Infosec, a Kolkata-based cybersecurity firm reimagining how companies catch vulnerabilities before they become breaches. Rather than relying on rule-based scanners that flood developers with false positives, RNT Infosec has built an AI-driven knowledge graph of a company’s codebase and maps it against real-world exploit paths pulled from live penetration tests and bug bounty platforms. Backed by Saha’s own track record breaking into the infrastructure of major Indian enterprises during authorized engagements, the company has already completed over 1,000 code reviews and landed a design partnership with ARC Document Solutions within its first year.
The RNT Infosec Story
Ishan brings more than eight years of hands-on offensive security experience to RNT Infosec, having run red team simulations, vulnerability assessments, penetration tests, and code reviews against major names including Max Life, Niva Bupa, Croma, Tata Capital, Dalmia Bharat, LTIMindtree, and Bajaj Auto. He has discovered multiple zero-day exploits, registered CVEs for them, and regularly reports vulnerabilities to CERT-In and India’s National Informatics Centre. That depth of field experience, seeing firsthand which vulnerabilities kept slipping past enterprise-grade tools, gave him a clear-eyed view of exactly where the industry’s existing code review tools were falling short.
Founded in 2025, RNT Infosec set out from day one to build something genuinely different: a next-generation, AI-based alternative to traditional static analysis, grounded in how real attackers actually exploit applications rather than in generic rule sets. Saha built the founding team around that same conviction, and RNT Infosec has since grown to ten people executing on it.
The Problem and the Solution
The problem RNT Infosec set out to solve is a familiar frustration for security teams everywhere: existing code review tools rely on rules-based pattern matching that isn’t context-aware, missing complex, business-logic-level vulnerabilities while burying real issues under a pile of false positives.
RNT Infosec’s answer is to build a knowledge graph of a client’s actual codebase and semantically validate code snippets against real attack patterns and exploit paths curated from penetration tests, vulnerability disclosure programs, and bug bounty platforms like HackerOne and Bugcrowd. Instead of matching code against generic rule sets, the system compares a company’s specific code paths against a matrix of exploitation techniques drawn from how applications have actually been broken into in the wild, an approach built to catch the business-logic flaws that pattern-matching tools are structurally blind to.
Business Model and Target Market
RNT Infosec is targeting three high-value segments: independent security researchers and developers, startups, and enterprises, with a sharp focus on any AI and tech-driven company whose product depends on code as the backbone of its business. Within that, the company has deliberately prioritized NBFCs and tech and SaaS startups as its beachhead markets, sectors where getting security right early has outsized value.
A key differentiator in RNT Infosec’s approach is that its detection engine runs on its own proprietary AI model, built in-house rather than wrapped around general-purpose models like ChatGPT, Gemini, Claude, or Cursor. This gives the company full control over how its exploitation matrix evolves. Alongside its core code review product, RNT Infosec is also expanding into adjacent tools, including third-party risk management, IT asset management, and external attack surface monitoring, laying the groundwork to become a broader security platform rather than a single-point solution.
Traction and Milestones
Even at the pre-launch stage, RNT Infosec has already completed more than 1,000 code reviews in its first year of operation, a strong signal of real-world validation for a company this young. Its standout milestone so far is securing ARC Document Solutions as a design partner, a relationship that has let the team stress-test its approach across both legacy, hardware-handling applications and newer tech-stack-based systems. During that engagement, RNT Infosec uncovered multiple business logic vulnerabilities that could have caused significant financial disruption for the client had they gone undetected, a concrete early demonstration of exactly the value the company was built to deliver.
Building With Intention
RNT Infosec has grown entirely on its own terms so far, choosing to prove its technology and land its first design partnership before bringing in outside capital. That sequencing has let the team stay laser-focused on building a product that genuinely works in production environments rather than one shaped by investor timelines. With over 1,000 code reviews and a marquee design partner already in hand, RNT Infosec is building its fundraising story from a position of demonstrated traction, exactly the kind of foundation that makes for a stronger, more selective conversation with future investors when the time comes.
Competitive Positioning
RNT Infosec’s competitive edge rests on two pillars: proprietary AI rather than a wrapper around existing large language models, and a detection methodology built from real-world offensive security engagements rather than theoretical rule sets. The company positions itself as removing the operational headache of security from its customers’ plates entirely, acting less like a tool vendor and more like an extension of a client’s own security team. Its ambition is to help customers’ detection capabilities stay ahead of attackers’ growing use of AI, not just keep pace with it.
Lessons From the Journey So Far
Ishan’s points to landing the company’s first design partner and assembling a team genuinely aligned with RNT Infosec’s technical vision as the two milestones that shaped the company’s early trajectory most. Both required patience and conviction, the kind of groundwork that tends to pay off well beyond the first year. Having cleared both hurdles within the company’s first year in operation, he and his team head into their next growth phase with a validated product, a marquee client reference, and a team built for the long term.
Vision and Next Steps
RNT Infosec’s long-term vision is to help its customers stay a step ahead of attackers, continuously raising their detection capabilities even as adversaries themselves adopt more capable AI tooling. The company’s underlying belief is straightforward: every startup deserves the freedom to grow without being derailed by a cyber attack. Its roadmap ahead centers on scaling its design partnerships into a broader customer base across its three target segments, deepening its knowledge-graph-based detection engine, and rounding out its complementary tools in third-party risk management, IT asset management, and external attack surface monitoring into a fuller security platform.
Key Takeaways
- RNT Infosec was founded in 2025 by Ishan Saha, built on his eight-plus years running red team and penetration testing engagements against major Indian enterprises.
- The company’s core product replaces rule-based code scanning with a knowledge graph mapped against real-world exploit paths from pentests and bug bounty platforms.
- It has completed over 1,000 code reviews and secured ARC Document Solutions as a design partner within its first year.
- RNT Infosec runs on its own proprietary AI model, giving it full control over its detection engine rather than depending on general-purpose LLMs.
- The company has grown on its own terms so far, building strong early traction as the foundation for its next chapter of growth.
FAQs
Who founded RNT Infosec?
Ishan Saha, alongside one co-founder, founded the Kolkata-based firm in 2025.
What problem does RNT Infosec solve?
It addresses the gap left by rule-based code scanning tools, which miss complex, context-dependent vulnerabilities and generate excessive false positives.
How is RNT Infosec’s approach different?
It builds a knowledge graph of a client’s codebase and validates it against real exploit paths from penetration tests and bug bounty platforms, rather than matching against generic rule sets.
Who is RNT Infosec’s target audience?
Independent security researchers and developers, startups, and enterprises, with an early focus on NBFCs and tech and SaaS companies.
What traction does RNT Infosec have?
Over 1,000 completed code reviews and a design partnership with ARC Document Solutions within its first year of operation.
What makes RNT Infosec’s technology unique?
It runs on its own proprietary AI model rather than building on top of general-purpose tools like ChatGPT or Claude, giving it deeper control over how it detects business-logic vulnerabilities.
© The Founder Nation | Written by TFN Research Desk |
