FintechOS and Fort Forge Powerful Alliance for Cybersecurity Revolution
At a glance
- Extended partnership: FintechOS announced on April 9, 2025, that it is extending its work with Romanian cybersecurity firm Fort as it expands in the US, UK and Europe.
- Four years in: Fort has provided security services to FintechOS for more than four years, including SOC-as-a-Service and DevSecOps consulting.
- Certifications: Fort helped FintechOS secure its operations to achieve SOC 2 and ISO 27001 certification in Europe and the US.
- Why it matters to customers: Banks and insurers require vendors to pass third-party risk assessments before they buy.
FintechOS keeps Fort as it grows abroad
FintechOS, a UK-based company founded in 2017 with roots in Romania, sells a low-code platform that banks and insurers use to launch and manage financial products. It raised $60 million in a Series B round in May 2024 to fund its global expansion. Now it is extending its partnership with Fort, the Bucharest-based cybersecurity services firm that has protected it since its startup days.
What Fort does for FintechOS
Fort, founded in 2015, has about 40 security professionals. It offers risk assessments, penetration testing, compliance consulting, incident response and SOC-as-a-Service, and for FintechOS it has run security operations and DevSecOps consulting while its CISO team maintained the company’s information security management system.
The extension is about compliance as much as defense. Banks, insurers and other financial institutions put vendors through mandatory third-party risk assessments during procurement. Fail one and the deal stalls.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Certifications and audits
Fort says it helped FintechOS reach SOC 2 and ISO 27001 certification in Europe and the US. Its compliance work also covers financial-sector rules such as DORA in the EU, PSD2, EBA guidelines and PCI DSS.
For a vendor selling into regulated institutions, those certifications open doors. Without them, many procurement processes stop before they start. The partnership keeps an outside team on hand.
What changes for FintechOS clients
For FintechOS’s customers, the practical effect is continuity: the same security partner that supported the company’s growth from a Romanian startup stays in place as it moves into new markets with different regulators and different audit demands.
Other fintech vendors face the same pressure from bank procurement teams. Many will need outside help to meet it.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Compliance as a sales requirement
This is a continuation of a long-running relationship rather than a new alliance. It shows how much of a fintech vendor’s growth now depends on passing customers’ security reviews. Certifications sell.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.