Back to portfolio
Payments & API

Stripe Payment Indonesia

Web, infra & API pentest

Nov 2024 - Apr 2025Security engagement
Stripe Payment Indonesia

Overview

Full-stack penetration test for a payments integrator covering web app, supporting infrastructure and REST APIs.

Highlights

  • Tested API authentication, rate limiting and idempotency controls.
  • Reviewed infra exposure, secrets handling and CI/CD posture.
  • Provided developer-grade remediation paths for each finding.