TAINA Platform Passes Annual Penetration Test With Its Strongest Result Yet

TAINA passes its annual external penetration test

Information security has always been a top priority at TAINA, backed by our ISO 27001 certification. Every year we bring in independent external security specialists to run a full penetration test of the TAINA platform. The aim is to check that the controls protecting our clients' data hold up against a real-world attack.

This year we passed again, and with the fewest findings we've ever had.

What we tested this year

This year's test covered two major areas.

The TAINA platform, with a focus on TAINA Authent-A-Link. Authent-A-Link is our registration journey capability. It lets financial institutions and their service providers securely authenticate customers and investors, either standalone or integrated, without needing an existing online portal. Authent-A-Link is often a customer's first point of contact with the platform, which also makes it the first place an attacker would look. So it got a large share of the testers' attention.

Our new cloud deployment model. This gives clients a more scalable platform with faster release cycles. Because it was tested in its first year, clients moving to it can do so knowing it has already been put through an independent attack simulation.

What is penetration testing?

A penetration test (pen test) is a controlled, simulated attack on a system, application or network. External security experts actively try to break in, the same way a real attacker would, to find and expose any weaknesses before someone else does. It's an industry-recognised way of showing that security controls work in practice, not just on paper.

Why the TAINA platform is pen tested every year

Our clients include global financial institutions of all types, including Big 4 firms. Protecting their data, and their customers' data, is non-negotiable. Annual pen testing lets us:

• Show clients, partners and investors that we take cyber security seriously, and give their information security teams clear answers to their data protection questions
• Find and fix potential vulnerabilities early, reducing the risk to our clients before it can turn into a breach

TAINA's 2026 penetration test score

Pen test findings are rated on five levels: critical, high, medium, low and informational.

The TAINA platform and our new cloud deployment model came through with zero critical, high or medium findings. The testers recorded just 6 low and 4 informational findings, our lowest score ever. In 2021 we recorded 10 lows and 2 informational findings.

Low and informational findings are minor. They're handled as part of our routine maintenance cycle and don't point to any significant vulnerability in the platform or the infrastructure behind it.

Security built into how we work

Passing an external test once a year is only one part of the picture. Internally, we run ongoing quality and information security testing. That means making sure the platform meets the business and data protection requirements of our clients, their customers and their investors, not just catching bugs.

"Passing again is great, but passing with fewer findings than ever, in a year when we put a brand-new cloud deployment model in front of the testers, is what I'm proudest of. It shows security is part of how we build, not something we check at the end." — Shaun Boughey, Head of Infrastructure, TAINA Technology

If your information security team has questions about how we protect client data, get in touch. To see the platform in action, request a demo.