Media & Publishing
Built for the minute the news breaks.
We run web, app and video platforms for publishers that must absorb election-night and breaking-news traffic, keep newsroom systems secure and deliver content at a cost that fits advertising margins.
- AWS Advanced Tier Services Partner
- ISO 27001 certified
In short
VA2PT provides managed cloud, CDN and video delivery operations, CMS and API security testing, and FinOps for news and digital media companies in India. We prepare platforms on AWS, Azure and Google Cloud for traffic spikes from elections, budgets and breaking events, and protect newsroom systems from defacement, account takeover and DDoS.
Clients include
What gets in the way
Traffic you cannot schedule
Election results, budget day and breaking stories bring sudden multiples of normal traffic. Origin servers and databases must be protected by cache and CDN design that holds under load.
Newsroom systems are targets
CMS accounts, publishing APIs and social integrations are attacked for defacement and misinformation. A compromised editor account is a credibility crisis.
Video and image delivery costs
Egress, transcoding and storage grow with every clip. Without optimisation, delivery cost rises faster than ad revenue.
How we help media & publishing teams
Managed cloud and CDN operations
Cache rules, origin shielding, image optimisation and autoscaling tuned for article and video traffic patterns.
AWS Cloud Services24x7 SRE for live events
War-room coverage for elections and major events, with engineers watching origin load, CDN hit rates and app APIs.
24x7 SRE & NOCVAPT for CMS and apps
Testing of the CMS, mobile apps, subscriber systems and publishing APIs, including account takeover and privilege escalation paths.
VAPTManaged security operations
WAF, DDoS monitoring and daily scans across public-facing properties, with follow-up until each issue is closed.
Managed Security (MSSP)FinOps for delivery costs
Egress, transcoding and storage tiering reviewed monthly against page views and watch time.
FinOps Services
Compliance that applies to you
The frameworks your customers, regulators and auditors will ask about, and how we help you meet them.
- DPDPA 2023Subscriber and reader profiles, newsletter lists and comment data are personal data under the Act.
- IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021Obligations for digital news publishers, including grievance handling and record keeping.
- CERT-In directions 2022Incident reporting and log retention for Indian platforms.
- ISO 27001Requested by advertising partners and international syndication customers.
Questions we hear
How do you prepare for election-night traffic?
We start with your last peak: traffic shape, cache hit rate, origin load and where it broke. Then we tune CDN caching for live blogs and result pages, add origin shielding, pre-scale application and database capacity, and load test the plan. On the night, engineers sit in a war room with you watching hit rates, origin errors and app API latency, with a rollback plan for every change made during the event.
What does a CMS security test look for?
The paths an attacker would use to publish a false story or deface a page: weak or reused editor credentials, missing multi-factor authentication, privilege escalation between roles, insecure plugins or themes, exposed admin endpoints and vulnerable publishing APIs. We also test the mobile apps and subscriber systems. Findings come with fixes prioritised by how directly they lead to unauthorised publishing.
Can you cut our video delivery bill?
Usually, yes. Common savings come from moving cold media to cheaper storage tiers, using per-title or adaptive encoding ladders, right-sizing transcoding jobs, and improving CDN hit rates so fewer requests reach origin. We measure egress and storage per property before and after and report the change against watch time so the saving is visible to finance.
Do you handle DDoS attacks?
We configure the cloud provider's DDoS protection and a WAF in front of every public property, monitor for volumetric and application-layer attacks, and keep runbooks for rate limiting, geo-blocking and challenge pages that can be applied within minutes. During known high-risk periods we increase watch coverage. We do not attack anyone back; the goal is to keep your readers served.
Talk to us about media & publishing.
A 30-minute call with a senior engineer. We look at your setup, name the biggest risks and outline what we would do first.