Swoop’s security has been verified by multiple rounds of independent, third-party security testing, most recently by Raxis, an award-winning cyber-security and penetration-testing consulting firm. As part of its rigorous penetration testing process, Raxis examined the Swoop platform for any potential security risks that could potentially expose information or provide additional access to resources. 

Tests were conducted using manual attack methods mixed with customized automated testing to assess a wide array of vulnerabilities and technical risks, including: 

• The ease with which attacks could be executed.
• The impact of the executed attacks on information security.
• The organization’s ability to detect and react to executed attacks.

Raxis certified that the Swoop platform capably deflects risks and security risk impact with industry accepted technology security controls. In addition, Raxis identified two standout security mechanisms inherent in the Swoop platform:

• DKIM Verification prevented spoofed emails during email authentication.
• The web application API throttled failed login attempts, preventing brute-force attacks against Swoop’s login.

With this latest attestation, Swoop continues to prove that its security meets—and beats—industry security standards, protecting websites and their users from malicious threats.