fintech

September 25, 2026 | 20 min

The Report Has to Satisfy Their Bank: Penetration Testing for a Hong Kong Fintech Under Counterparty Review

For the founder or head of engineering at a 15-40 person Hong Kong fintech whose banking counterparty has made a penetration test report a condition of onboarding. Who actually reads the report and what they need to write down, the four things that make a report acceptable, how to scope the test to the relationship, why the cheapest scan fails and the biggest engagement overshoots, planning backwards from the deadline, the re-test small teams forget to negotiate, handling findings you cannot fix in time, and reusing the report for the next counterparty.

August 28, 2026 | 15 min

Why a Singapore Fintech's Cyber-Insurance Renewal Came Down to One Vulnerability Scan

A composite scenario from Singapore's fintech sector: a cyber-insurance broker asks for a current, dated vulnerability-scan report, and nobody in the office has one. What insurers are actually asking for, and what a real recurring scanning practice looks like.