Security for Fintech

Legal, financial & reputational risk Protect your users from fraud

CYBERDUR tests the security of your financial application: configuration, common injections, exposed secrets. The smallest flaw exposes your users to fraud, and your company to a regulator sanction.

Test my application now

PRODUCT

Is your application hackable?

Enter your application's address and receive a professional penetration test report with the list of weaknesses detected.

from €100 · report in hours · no scoping call · no sales meeting

PRICING

Simple, transparent pricing

One test, or a volume pack at a lower price per test. No subscription: your credits are valid for 12 months.

1 test

Check one application before a release.

100 €

100 €/test

1 test

Valid 12 months from purchase

Create an account to buy

5-test pack

One test per release, over a few months.

450 €

90 €/test −10 %

5 tests

Valid 12 months from purchase

Create an account to buy

10-test pack

Several apps, or a steady release cadence.

800 €

80 €/test −20 %

10 tests

Valid 12 months from purchase

Create an account to buy

Best value

25-test pack

Continuous deployment across several apps.

1 750 €

70 €/test −30 %

25 tests

Valid 12 months from purchase

Create an account to buy

Included in every test

✔ Automated non-destructive test
✔ No exploitation
✔ No changes to your data
✔ External black-box test
✔ No access to your code
✔ Site crawl across multiple depth levels
✔ TLS/SSL analysis
✔ Protocol analysis
✔ Cipher analysis
✔ Certificate analysis
✔ HSTS analysis
✔ Misconfiguration detection
✔ Exposed file detection
✔ XSS injection detection
✔ Error-based SQLi injection detection
✔ Local file read injection detection
✔ CORS policy check
✔ Vulnerable JavaScript libraries
✔ Secrets exposed in public code (keys, tokens)
✔ Domain email configuration (SPF, DMARC, CAA)
✔ Detailed report
✔ PDF report export
✔ Results history

One-time payment, no subscription or automatic renewal. Credits are valid for 12 months and non-refundable. Need more than 25 tests? Email us: contact@cyberdur.com

CYBERDUR TESTED

HOW IT WORKS

Three steps. A report in hours. No security team, no setup.

Point us at your app

Drop in a public URL and prove you own it: add a DNS record, or drop a text file on your site, whichever is easier for you. Nothing to install, no code to touch. Any stack works: React, Next.js, Django, Rails, no-code, whatever you ship.

https://yourapp.com

The engine goes to work

It crawls your site on its own (pages, scripts, headers, configuration), then runs a battery of non-destructive checks: TLS, misconfigurations, exposed files, common injections, CORS, JavaScript libraries and exposed secrets.

crawl · TLS · configs · injections

Get a report you can act on

Each security finding is presented with its severity. No 200-page PDF, no technical jargon, just a concise, action-oriented report that gets straight to the point. A sample test report is available.

CRITICAL → HIGH → MEDIUM → LOW

See a sample report

WHO IT'S FOR

Whatever your financial product

Neobanks & payment accounts

Your users trust you with their money: that trust is lost in a single incident.

Trading & crypto

A prime target for automated attackers, around the clock.

Lending & scoring

Sensitive financial data: a leak exposes your users to fraud and identity theft.

PSD2 & GDPR compliance

A recurring test report to document your security obligations.

FAQ

Questions before you start?

Short answers to what people ask most about CYBERDUR.

What is CYBERDUR?

Cyberdur is the French specialist in non-destructive automated penetration testing. You give us the address of a web application (after proving you control the domain) and our engine probes it from the outside, without touching your data: TLS configuration, misconfigurations and exposed files, common injections (XSS, SQL injection, local file read), CORS policy, vulnerable JavaScript libraries, exposed secrets and your domain's email setup. You then receive a report with every finding detected.

Is it safe to run on production?

Yes. The test is non-destructive: no exploitation, and none of your data is changed or deleted. It does send traffic to your site (page requests and harmless probes).

How long does a test take?

The test starts automatically once your domain is verified. Tests take several hours and typically finish within 3 hours, but may take longer depending on the size of the site. You get an email the moment your report is ready.

What is in the report?

A short summary, an overall severity rating, and every finding grouped by severity: Critical, High, Medium, Low. Each one has a description and the command or hint to verify it. Purely informational findings are listed separately, in an Informations section. Reports are exportable as PDF. Your previous test report history remains available in your personal dashboard.

professional penetration testing

Free test preview.

This free preview represents only 5% of a full Cyberdur test. It is strictly a passive, public check: TLS configuration, HTTP security headers, exposed technologies. No exploitation attempts, no account required.

By running this test, you confirm you are authorised to have this URL analysed. The test is limited to a single public, read-only request.

See pricing for a full test →

Sample test result

$ cyberdur check exemple.fr

✔ TLS               valid · Let's Encrypt · exp 2026-11-04
✘ CSP header         missing
✘ HSTS header        missing
! Server banner      nginx/1.21.6 (version exposed)

Overall score  D · 49/100
# free preview, not a full report

Don't let a flaw expose your users to fraud

Run a free passive public check now, or pick a plan for a full test of your application.

Free check See pricing