Pentest
We regularly commission independent penetration tests to ensure the security of our systems and infrastructure. These tests are a critical component of our cybersecurity strategy and help us detect and address vulnerabilities early — before they can be exploited.
Frequency and Approach
We conduct penetration tests at least once every two years, carried out by an external, independent party. The tests cover all externally accessible systems and services within our operational scope. To ensure safety and service continuity, all testing is performed on our staging environment, which is a fully functional copy of our production environment.
Findings are assessed based on risk and urgency. Mitigating actions are immediately integrated into our development or operational cycles. The CISO of X-Guard oversees all follow-up, with escalation to management when necessary.
Latest Pentest
Our most recent penetration test was completed on 20 October 2026 by Aikido. The engagement was a white-box security assessment of the X-Guard platform APIs and dashboards, carried out on the staging environment.
The test followed established methodologies, including the OWASP Testing Guide, PTES, NIST SP 800-115, and OWASP ASVS. It examined authentication and access control, injection, business logic, sensitive data exposure, configuration, file handling, and cryptography across the applications in scope.
Every finding has been remediated. No issues remain open. After remediation, the security posture for this scope was rated Excellent (A), exceeding baseline expectations.
- Date: 20 October 2026
- Test type: White box
- Testing firm: Aikido
- Open issues: 0 critical, 0 high, 0 medium, 0 low
- Highest remaining severity: None
- Rating after remediation: A — Excellent