PayaAudit is our on-demand, manual penetration testing service for Forex/CFD brokers. Senior engineers probe your Trader's Room, CRM, PSP integrations and the servers behind your MT4/MT5 or cTrader platform — the systems that actually hold client funds and data, not just your website.
Authentication, sessions, access control, deposit and withdrawal flows, KYC document storage.
Roles and permissions, data exposure, API secrets handling, callback and webhook validation, transaction tampering.
The MT4/MT5 or cTrader servers your platform runs on — exposed services, admin interfaces, host and network configuration.
Findings ranked by real-world impact, a live debrief with your team, and a retest once the critical fixes land.
One free scoping call. A fixed quote. A manual penetration test of the systems that hold your clients' funds and data.
Book a scoping call →