Security is a fundamental part of building technology for regulated markets. At St8, we see it as an ongoing commitment, built into the way we develop, operate and improve our platform.
As part of that commitment, we recently completed an independent security assessment with Cure53, putting the St8 web application, APIs, authentication and authorisation, team management and cloud infrastructure through an extensive penetration test and source code audit.
The assessment provided an independent view of our security foundations and, more importantly, another opportunity to challenge and strengthen them.
Cure53 assessed the primary security posture of the St8 web application as adequate, providing independent validation of the security foundations already in place.
The assessment also gave the St8 engineering team an opportunity to further strengthen those foundations, with the identified areas addressed promptly following testing.
As Cure53 confirmed:
"St8 successfully fixed or mitigated all of the reported issues."
The assessment reinforces St8’s commitment to continuous security improvement, with independent testing providing an additional layer of assurance as the platform continues to grow and evolve.
For us, this is what makes independent testing valuable. It is not about treating security as a box to tick, but about continuously testing our assumptions, identifying opportunities to improve and making those improvements part of the way we build.
The assessment also complements our recent achievement of ISO 27001:2022 certification, adding another layer to the security framework behind the St8 platform.
As St8 continues to grow across regulated markets, we remain focused on building technology on strong foundations: secure infrastructure, robust processes and a continuous approach to improvement.
Full report available here.