An automation agency built by security people.
AvlokAI is an independent AI automation company registered in India and operating from Hyderabad, Telangana, India, founded in 2024. We hand every build over documented, running in accounts you own.
The people
Sushanth Kasturi
Founder & CEO
From vulnerability assessment, penetration testing, and digital forensics. Sets how access, secrets, and logging are handled in every build.
Rohith
Co-Founder & CTO
Builds the retrieval and orchestration layer — ingestion pipelines, vector search, and the n8n workflows that hold a system together.
Nathaniel Francis
Chief of Sales
Runs scoping and commercials: turning a described problem into a written scope with a fixed price and a delivery window.
What the security background changes
Scoped credentials
Every key a workflow holds is scoped to the single job it does, and reviewed at handover.
A written data map
Where data travels, which third parties receive it, and what each one retains.
Adversarial testing
Anything acting on content you do not control gets tested as though it were hostile.
Reconstructable logs
Logging good enough to answer what a workflow did last Tuesday, and why.
The longer version
Most automation work involves handing a workflow the keys to a CRM, a mailbox, and a customer database, then pointing a language model at content the business does not control. That is an access-control and injection problem before it is an AI problem, and it is the part most agencies discover afterwards.
We offer the same review against automationssomeone else built.
How we operate
- 2–6 wk
- typical time to first workflow live
- Fixed price
- quoted against a written scope
- Your cloud
- deployed to your accounts and API keys
- Security-led
- built by a VAPT and forensics team
What we will not do
Worth stating plainly, because every one of these is something a client has been sold elsewhere.
- We do not build unsolicited bulk messaging or unofficial-API broadcasting, whatever the instruction.
- We do not build sentiment-filtered review requests. Google prohibits review gating and it puts a Business Profile at risk.
- We are not an accredited auditor and issue no HIPAA, ISO 27001, or SOC 2 attestation.
- We publish no client performance metrics. Any percentage attributed to us did not come from us.
- We do not use client or enquiry data to train machine-learning models.
Not to be confused with
AvlokAI is also written Avlok AI, and both spellings refer to this company. We are not connected to Avlok Kohli, to AngelList, or to any other person or company using a similar name. The names are similar; the entities are unrelated. Our only official domain isavlokai.com.