Case Study · Financial Services · Payment Infrastructure
Masav

Masav

Permission confirmed Secure Software DevelopmentPenetration TestingSecurity Awareness Training
Industry

Central financial clearing infrastructure

Engagement

Secure development lifecycle, penetration testing, staff training

Services

Secure Software Development, Penetration Testing, Training

Background

Masav (Bank Clearing Center Ltd.) operates Israel's central "Debit, Credit and Payment Transfers" system. Operating since 1982 and owned by Leumi, Poalim, Discount, Mizrahi and the International banks, Masav sits at the center of the country's financial activity, serving every bank and their customers.

Challenge

As the institution processing large-scale transactions and sensitive financial data for the entire Israeli banking system daily, Masav is an obvious target for sophisticated financial-sector threats. Its role in a tightly regulated environment meant its security posture had to match, and ideally outpace, the sector's own benchmarks.

Scope of work

Cybecs embedded a Secure Development Lifecycle (SDLC) into Masav's operations, with detailed code reviews at each stage from inception to deployment. Continuous internal and external security monitoring covered configurations, ports and vendor and cloud integrations. Cybecs ran OWASP-methodology penetration testing across Black Box, Grey Box and White Box scenarios, and separately hardened the architecture behind Masav's real-time "Immediate Transfer" service. Alongside the technical work, Cybecs designed security awareness training for Masav's staff, measuring knowledge levels before and after training to track real improvement, not just attendance.

Outcome

Masav's security program now spans secure development practice, continuous monitoring, and a workforce with measurably improved security awareness, anchored by a real-time transfer service built to the standards its role in the national payment system demands.

“Adopting Cybecs' solutions provided a revolutionary shift in our security approach, bringing about profound enhancements within a short span.”

Ido Sagi, CISO, Masav

Related

More case studies

Facing a similar challenge?

Let's talk about what a comparable engagement would look like for your organization.

Discuss a Similar Engagement →