Skip to main content
Kestrel Digital
This is a test website. Kestrel Digital is a fictional company — the people, clients, prices, job openings and contact details on this site are not real.
← Back to all case studies

Finora Bank · Financial services

Hardening a digital bank ahead of its Series B

A security programme that took Finora from its first penetration test to SOC 2 Type II certification in nine months.

Illustration of a shield with a padlock in front of a credit card
vulnerabilities fixed
64
to SOC 2 Type II
9 months
Series B closed
€40M

The challenge

Investors required SOC 2 certification before closing the next funding round, but Finora had no dedicated security team and only nine months to get ready.

Our approach

  • →A full penetration test of the mobile app, public APIs and cloud infrastructure, followed by a prioritised remediation plan.
  • →Practical security policies written together with the engineering team, not imposed on them.
  • →Automated evidence collection that turned the audit from a three-month ordeal into a two-week formality.
“Kestrel made security feel like a shared project rather than a list of things we were doing wrong.”
Aisha Rahman
CTO, Finora Bank

Have a project in mind?

Tell us what you are building. We will get back to you within one business day with honest feedback and a rough estimate — free of charge.