Overview
A certificate only means something if the software running in production is the software that was tested. Source code review and build verification close that gap.
Where you handle card payments, we also assess your controls against the Payment Card Industry Data Security Standard.
What we test
- Review of critical source code for game and RNG logic
- Reproducible builds and hash verification
- Detection of hidden or unauthorised functions
- Secure coding practices
- PCI DSS controls for card data storage, processing and transmission
What you submit
- Source code for in-scope components
- Build process documentation
- Card data flow diagrams, for PCI DSS
What you receive
- Source code review report
- Verified hash list for certified builds
- PCI DSS assessment findings
Timeline and pricing
Both depend on the scope of the product and the number of markets. We agree a fixed quote and a timeline at scoping, before any work starts, and you can follow progress throughout.