Customer Case Study | Cashbee
How does an intrusive audit strengthen application security and protect user data?
Cashbee offers an innovative mobile application that enables users to manage and optimize their savings in a simple
and secure manner. This key player in French FinTech initiated an authorization process with the ACPR, for which one of the main requirements was conducting a security audit on its websites and applications.
The Requirements
Assess the robustness of exposed assets
Evaluate the robustness of internet-exposed assets against various potential threat sources by identifying vulnerabilities exploitable by malicious actors.
Protect personal and financial data
Savings management involves processing sensitive data, such as banking details and user identities. Any security vulnerability could lead to severe consequences.
Obtain authorization from the ACPR (Banque de France)
ACPR authorization is a key milestone for any financial services company. This certification guarantees compliance with current banking and regulatory standards—an essential requirement to ensure the legitimacy of the services provided.
The ITrust Solution
The chosen solution: an external application penetration test
ITrust was selected for its comprehensive and methodical approach to security audits, as well as the diversity of its penetration testing methodologies, enabling an in-depth vulnerability assessment.
Our experts are capable of promptly identifying flaws and delivering actionable, precise technical recommendations.
By incorporating the strictest security frameworks, such as ISO 27001, the RGS, and OWASP, ITrust guarantees rigorous compliance with international standards.
The Results
- black box: testing resilience against external threats
- grey box: assessing internal security and access management
- a rigorous assessment of risks and vulnerabilities
- precise recommendations for strengthened security
“The ITrust audit was conducted rigorously and efficiently, with minimal impact on internal teams, while maintaining an uncompromising depth of analysis.
The subsequent recommendations significantly strengthened our network security and customer data protection. As a regulated institution, it was the exact solution we needed.”
Chaker Nakhli
Co-founder & CTO, Cashbee
Contact us
An initial consultation with our team will allow us to fully understand your requirements and provide you with a tailored quote.