Security testing for payment gateways, open banking APIs and core banking systems, shaped by PCI DSS, DORA, FAPI and Swift requirements.
Testing a payment gateway or processor platform as a service provider under PCI DSS: merchant and API integrations, tenant separation, segmentation testing every six months under 11.4.6 and customer testing support under 11.4.7.
Testing account information and payment initiation APIs: OAuth and FAPI 2.0 controls such as PAR, PKCE and sender-constrained tokens, consent handling, object level authorization and abuse of payment flows, alongside OpenID conformance testing.
Assessment of core banking platforms and their integrations, scoped to DORA's yearly testing of systems supporting critical or important functions, with safe testing practices for production-adjacent environments and links to TLPT readiness.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.