Client Overview
Etranzact – Enterprise digital payments provider operating across Nigeria and
international markets (US, UK, UAE).
Etranzact was preparing to deploy Credo payment capabilities using a combination of Credo API services, SDKs, and React-based checkout plug-ins across multiple regions, including Nigeria and international markets. While core payment flows were available, there were risks related to inconsistent validation between API services, SDKs, and front-end components, market-specific scheme failures, and limited assurance of security and performance readiness ahead of wider rollout.
Etranzact was preparing to deploy Credo payment capabilities using Credo SDKs and React-based checkout plug-ins across multiple regions. While core payment flows were in place, several risks threatened platform reliability, compliance, and security:
We delivered a structured, risk-led assurance programme covering SDKs, front-end plug-ins, APIs, and security.
We began with a discovery session to fully understand the delivery scope, technical landscape, regional constraints, and non-functional requirements, including agreed load and performance criteria. This allowed us to identify high-risk areas and define a targeted assurance strategy.
We then carried out API services testing, validating Credo endpoints to ensure correct handling of mandatory fields, authentication, scheme rules, and error scenarios across markets. This was followed by SDK validation and React plug-in functional testing, confirming consistent behaviour and alignment between UI, SDKs, and backend services.
As part of the agreed scope, we conducted load and performance testing to assess throughput, response times, and stability under expected and peak traffic. Findings were analysed against agreed benchmarks, and practical recommendations were presented to improve scalability and resilience.
In parallel, we performed security vulnerability scans across all Credo APIs, aligned to the OWASP Top 10, with remediation verified through retesting.
