How HiBank Strengthened Continuous Security Validation Without Operational Disruption

Customer stories

Jan 09, 2025

HiBank Indonesia moved from periodic, consultant-led penetration tests to continuous, automated security validation with Pentera, eliminating long gaps in coverage. The platform enables frequent testing across on-prem and cloud environments without disrupting critical banking operations, while prioritizing vulnerabilities based on risk. As a result, the bank has improved remediation KPIs, systematically reduced exposure, and gained greater confidence in its overall security posture.

Lim Siaw Liang, CISO at HiBank Indonesia, explains how Pentera strengthened security validation in a highly regulated financial environment while minimizing operational disruption.

Operating under strict regulatory requirements, the bank previously relied on costly third-party penetration tests conducted periodically, leaving large portions of its attack surface untested for extended periods. More frequent testing was avoided due to concerns about performance issues and downtime impacting critical banking applications. After deploying Pentera, Hi Bank was able to continuously test its environment, including cloud infrastructure, without significant disruption to operations.

With automated validation, risk-based prioritization, and regular testing across business and off-hours, the bank now systematically identifies and eliminates active vulnerabilities, mitigates critical and high-risk findings within one week, and confirms remediation through retesting. The result is stronger exposure management, improved vulnerability KPIs, and increased confidence in the organization’s overall security posture.