Bank of Spain-regulated card issuer combines human-led and agentic AI pentesting to surface business logic risk and meet regulatory traceability requirements
Synack, the AI + human penetration testing platform for continuous security validation, announced that a Bank of Spain-regulated Credit Financial Institution, Iberia Cards, has adopted the Synack Red Team (SRT) alongside Sara AI Pentesting to move beyond annual, fixed-scope compliance testing toward a model of continuous security validation.
Through the Synack platform, customers like Iberia Cards can experience Sara AI Pentesting, powered by the Synack Autonomous Red Agent, plus the SRT, a globally vetted community of elite ethical hackers, to expand attack surface coverage, accelerate testing, and validate real-world exploitability with greater speed and confidence.
As a financial institution managing payment infrastructure under strict regulatory oversight, Iberia Cards needed a testing program that could surface the business logic vulnerabilities that automated scanners routinely miss, while producing documented, reproducible evidence for regulators and executive leadership. Working with Synack, the company built a program that pairs deep, human-led SRT engagements with Sara AI Pentesting for more frequent testing and validation between those cycles.
Also Read: CIO Influence Interview with Hugo Dozois-Caouette, CTO and Co-founder at MaintainX
“What keeps bringing me back to Synack is the convergence of three things you rarely find together: professionalism, breadth in vulnerability discovery, and real depth in findings,” said José Manuel Rivera García, Chief Information Security Officer at Iberia Cards. “The serious problems are always in the business logic. There’s always time to improve the perimeter later, but if you’re only testing once a year, you’re not finding what matters.”
“Iberia Cards is a strong example of what continuous security validation looks like in one of the most highly regulated industries in the world,” said Angela Heindl-Schober, Chief Marketing Officer at Synack. “It also reflects the growing footprint we’re building across Spain and Portugal and within financial services more broadly. Customers in this sector can’t afford to choose between speed and rigor, and pairing Sara AI Pentesting with the Synack Red Team means they no longer have to.”
Also Read: CIO Influence Interview with Hugo Dozois-Caouette, CTO and Co-founder at MaintainX
