Sportsbook, security and inspection

Penetration testing and vulnerability scanning

Web, mobile and API security testing, before launch and on an agreed schedule.

Overview

Regulators require operators and suppliers to show their systems are secure, and attackers target gambling platforms because money moves through them.

Our security testers attempt to break your platform the way an attacker would, then tell you plainly what they found, how serious it is and how to fix it.

What we test

  • External and internal network penetration testing
  • Web application testing against the OWASP Top 10
  • Mobile application testing (Android and iOS)
  • API security, authentication and session handling
  • Vulnerability scanning on a recurring schedule
  • Retesting of fixed findings

What you submit

  • Scope: hosts, applications and APIs in scope
  • Rules of engagement and testing windows
  • Test accounts and environments

What you receive

  • Security assessment report with risk ratings
  • Executive summary for management and regulators
  • Retest confirmation once fixes are made

Timeline and pricing

Both depend on the scope of the product and the number of markets. We agree a fixed quote and a timeline at scoping, before any work starts, and you can follow progress throughout.

How the work runs

Scope, test, certify, maintain.

1

Scope

We go through your submission and target markets, then agree exactly what needs testing. You get a fixed quote before work starts.

2

Test

Our engineers run the mathematics, functional, RNG and security checks. You follow each stage, with a Technical Account Manager on hand.

3

Certify

You receive the report and certificate for the regulations and jurisdictions you are entering, ready to send to the regulator.

4

Maintain

We keep approvals current with periodic audits, and handle changes, reskins and renewals before they become urgent.

Scope this service for your product

Send us the product and the target markets. We will confirm exactly what testing applies and send a fixed quote.