Redsys and Prisma Pay: testing the systems behind millions of payments
Millions of daily transactionsPOS hardware, firmware and protocolsPayment applications and APIs
The challenge
In the payments industry, security isn't a feature of the product — it is the product. Redsys and Prisma Pay operate critical payment infrastructure processing millions of financial transactions every day. The challenge: subject the entire payment ecosystem to rigorous security testing, from the physical terminal in the shop to the platform authorising the transaction, in order to prevent fraud and identify attack vectors before anyone else does.
The solution
We delivered advanced security assessment and penetration testing for Redsys, in collaboration with Serquo, and for Prisma Pay, across two highly specialised domains:
- Hardware and firmware security — physical and logical penetration testing of point-of-sale (POS) terminals, assessing device security, embedded firmware and communication protocols.
- Application and API security — in-depth assessment of the web applications and backend APIs responsible for payment processing.
The results
- End-to-end payment security — the full payment lifecycle tested, from card interaction at the point of sale to authorisation in the backend.
- Fraud prevention — the attack vectors identified were closed before anyone could exploit them, and every fix was verified afterwards.
- Trust and reputation — demonstrated security standards that exceed industry expectations, reinforcing confidence among banks, merchants and partners.