@extends('layouts.app')

@section('title', 'Financial  | ' . config('app.name'))

@push('styles')

    @vite('resources/css/pages/industry-pages.css') 
    
@endpush

@push('scripts')

@vite('resources/js/industry-pages.js')

@endpush

@section('content')
 
 <x-page-video-header
        page="financial"
        title="SecureX360"
        subtitle="for Financial Services"
        description="Continuous Threat Exposure Management that discovers, prioritises, validates and remediates the exposures putting customer funds, account data and regulatory standing at risk — with every piece of assessment data kept in-region."
     />



<!--==================================================
Solution Overview
===================================================-->

<section class="industry-intro">

    <div class="container">

        <div class="row justify-content-center">

            <div class="col-lg-12 ">

                <div class="industry-intro-content">

                    <span class="industry-intro-tag animate-up" >
                        SOLUTION OVERVIEW
                    </span>

                    <h2 class="animate-up">
                        One institution, dozens of channels, 
                        <span>a widening attack surface</span>
                    </h2>

                    <p class="animate-up">
                        Banks and insurers no longer operate behind a single perimeter. Core banking sits alongside mobile and internet banking, open-banking APIs, payment rails, ATM and POS networks, trading platforms, a branch estate and a web of fintech and outsourcing partners. Every new digital channel and every acquisition adds exposure - and attackers follow the money.
                    </p>

                    <p class="animate-up">
                        Financial services is the second most expensive sector in the world to breach, and the fraud, regulatory and reputational consequences land faster here than almost anywhere else. That is an exposure management problem, and it is what SecureX360 is built to solve.
                    </p>

                </div>

            </div>

        </div>

    </div>

</section>

<!--==================================================
Industry Statistics
===================================================-->

<section class="industry-stats d-none">

    <div class="container">

        <div class="row g-0">

            <div class="col-lg-3 col-md-6">

                <div class="industry-stat-item">

                    <h2 class="counter"
                        data-prefix="$"
                        data-suffix="M"
                        data-value="5.56">0</h2>

                    <p>
                        average cost of a financial-sector data breach 2nd highest of any industry 
                    </p>

                    <span>IBM 2025</span>

                </div>

            </div>

            <div class="col-lg-3 col-md-6">

                <div class="industry-stat-item">

                    <h2 class="counter"
                        data-suffix="%"
                        data-value="25">0</h2>

                    <p>
                        higher than the global average breach cost
                    </p>

                    <span>IBM 2025</span>

                </div>

            </div>

            <div class="col-lg-3 col-md-6">

                <div class="industry-stat-item">

                    <h2 class="counter"
                        data-suffix="%"
                        data-value="22">0</h2>

                    <p>
                        of breaches begin with compromised credentials 
                    </p>

                    <span>Verizon 2025 DBIR</span>

                </div>

            </div>

            <div class="col-lg-3 col-md-6">

                <div class="industry-stat-item border-0">

                    <h2 class="counter"
                        data-suffix="%"
                        data-value="34">0</h2>

                    <p>
                        of breach cost is detection & escalation - the highest of any sector, driven by tight regulator-reporting timelines 
                    </p>

                    <span>IBM 2025</span>

                </div>

            </div>

        </div>

    </div>

</section>

<!--==================================================
CTEM FOR BANKING & FINANCIAL SERVICES
===================================================-->

<section class="industry-challenge-services">



    <div class="container">

        <!-- Heading -->

        <div class="industry-challenge-services-heading">

            <h2 class="animate-up">

                CTEM for Banking &

                <span>Financial Services</span>

            </h2>

        </div>

        <div class="row g-3 align-items-stretch mt-5">

            <!--=====================================
            LEFT COLUMN
            ======================================-->

            <div class="col-lg-6  d-flex">

                <div class="industry-challenge-left-column">

                    <!-- Challenge -->

                    <div class="industry-challenge-card industry-challenge-challenge h-100 w-100">

                        <h3>

                            Challenge

                        </h3>

                        <p class="animate-up">

                            Financial institutions face an attack surface spanning core banking, mobile and internet channels, open-banking and payment APIs, ATM/POS networks, trading and treasury systems, a branch estate and a deep fintech and outsourcing ecosystem - much of it interconnected, regulated and changing with every release. 

                        </p>

                        <p  class="animate-up">

                            Traditional vulnerability management neither keeps pace with the rate of change nor distinguishes the findings that put customer funds and data at genuine risk.

                        </p>

                    </div>

                </div>

            </div>

            <!--=====================================
            RIGHT COLUMN
            ======================================-->

            <div class="col-lg-6  d-flex">

                 <!-- Solution -->

                    <div class="industry-challenge-card industry-challenge-solution h-100 w-100">

                        <h3>

                            Solution

                        </h3>

                        <p class="animate-up">

                             SecureX360 runs a continuous CTEM programme that discovers, prioritises, validates and remediates critical exposures around the clock.
                        </p>

                        <p class="animate-up">

                            Discovery closes the inventory gap across IT, cloud and channel estates. Exposure scoring ranks findings by their route to customer data, payment systems and core banking rather than by raw CVSS.
                        </p>

                        <p class="animate-up">

                            The integrated PenX360 engine then proves which exposures are genuinely exploitable, and validated findings are routed to owners with audit-ready evidence attached.
                        </p>

                    </div>

            </div>

        </div>

    </div>

</section>

<section class="industry-outcomes">

    <div class="container">

        <div class="industry-outcomes-heading">

            <span class="section-label  ">
                Outcomes
            </span>

            <h2 >
                What <span>SecureX360</span> delivers
            </h2>

        </div>

        <div class="row g-4 mt-5">

            <div class="col-lg-4">

                <div class="industry-outcome-card ">

                    <img
                        src="{{ asset('images/icons/financial-outcome-risk.svg') }}"
                        alt=""
                        class="industry-outcome-icon">

                    <h3  >
                        Reduce fraud, breach and downtime risk
                    </h3>

                    <p >
                        Continuous validation surfaces exploitable exposures before attackers do—lowering the likelihood of fraud events, payment outages, customer-data compromise and regulatory penalties.
                    </p>

                </div>

            </div>

            <div class="col-lg-4">

                <div class="industry-outcome-card active">

                    <img
                        src="{{ asset('images/icons/financial-outcome-priority.svg') }}"
                        alt=""
                        class="industry-outcome-icon">

                    <h3>
                        Prioritise by real financial risk, not CVSS
                    </h3>

                    <p >
                        Exposure scoring ranks findings according to their route to customer funds, payment systems and core banking so security teams remediate what truly matters first.
                    </p>

                </div>

            </div>

            <div class="col-lg-4">

                <div class="industry-outcome-card">

                    <img
                        src="{{ asset('images/icons/financial-outcome-compliance.svg') }}"
                        alt=""
                        class="industry-outcome-icon">

                    <h3  >
                        Turn compliance into a by-product
                    </h3>

                    <p >
                        SecureX360 continuously generates audit-ready evidence aligned with SAMA, PCI DSS, PDPL and regional banking frameworks—making compliance part of daily operations.
                    </p>

                </div>

            </div>

        </div>

    </div>

</section>
 

<section class="industry-compliance">

    <div class="industry-compliance-bg"></div>

    <div class="container">

        <!-- Heading -->

        <div class="industry-compliance-heading">

            <span class="section-label">
                Compliance
            </span>

            <h2>

                Evidence mapped to the <br>

                <span>regulators that matter</span>

            </h2>

        </div>

        <div class="row align-items-stretch g-4">

            <!--====================================
            LEFT CARD
            =====================================-->

            <div class="col-lg-4">

                <div class="industry-compliance-card">

                    <div class="industry-card-glow"></div>

                    <div class="industry-card-icon">
                        <img src="{{ asset('images/icons/compliance-document.svg') }}" alt="">
                    </div>

                    <div class="industry-card-content">

                        <p>
                            Financial institutions answer to a central bank, a cybersecurity authority, the card schemes and a data-protection regime at once — across every market they operate in. SecureX360 produces the evidence once and maps it across all of them.
                        </p>

                    </div>

                </div>

            </div>

            <!--====================================
            RIGHT SIDE
            =====================================-->
@php

$complianceItems = [

    [
        'title' => 'SAMA CSF (KSA)',
        'content' => 'Saudi Central Bank Cyber Security Framework for regulated financial institutions.'
    ],

    [
        'title' => 'CBUAE, QCB, CBB and regional central banks',
         'content' => 'cybersecurity and operational-resilience obligations across GCC and wider MENA markets.'
    ],

    [
        'title' => 'NCA ECC (KSA)',
         'content' => 'mandatory controls for finance as an in-scope essential service.'
    ],

    [
        'title' => 'PCI DSS',
         'content' => 'cardholder-data security for issuers, acquirers and processors.'
    ],

    [
        'title' => 'SWIFT CSP',
         'content' => 'Customer Security Programme controls for interbank messaging.'
    ],

    [
        'title' => 'PDPL & regional data protection',
        'content' => 'Lawful, secure processing of customer data with residency constraints.'
    ]

];

@endphp
            <div class="col-lg-8">

                 <x-industry-compliance
                        :items="$complianceItems" />

            </div>

        </div>

    </div>

</section>


<section class="industry-advantage">

    <div class="container">

        <div class="industry-advantage-wrapper">

            <div class="industry-advantage-heading">

                <span class="section-label">
                    Why
                    <img src="{{ asset('images/securex360-white-logo.svg') }}" alt="">
                </span>

                <h2>
                    The regional
                    <span>advantage</span>
                </h2>

            </div>

            <div class="row g-4 align-items-stretch">

                <!-- LEFT -->

                <div class="col-lg-6">

                    <div class="advantage-column">

                        <div class="advantage-card">
                            <h3>Data sovereignty by design</h3>
                            <p>assessment and validation data stays inside the country / region.</p>
                        </div>

                        <div class="advantage-card active">
                            <h3>Financial-sector focus </h3>
                            <p>exposure scoring built around payment systems, core banking and customer-data risk.</p>
                        </div>

                        <div class="advantage-card">
                            <h3>Regulator-ready evidence</h3>
                            <p>pre-mapped to SAMA, regional central-bank frameworks, PCI DSS and NCA.</p>
                        </div>

                    </div>

                </div>

                <!-- RIGHT -->

                <div class="col-lg-6">

                    <div class="advantage-column">

                        <div class="advantage-card">
                            <h3>Discovery, prioritisation and validation unified </h3>
                            <p>CTEM plus PenX360 automated penetration testing in one solution, not a stack of stitched-together tools.</p>
                        </div>

                        <div class="advantage-card">
                            <h3>Force-multiplier for lean teams </h3>
                            <p>continuous automated assessment reduces reliance on scarce specialist talent.</p>
                        </div>

                    </div>

                </div>

            </div>

        </div>

    </div>

</section>


<section class="industry-faq">

    <div class="container">

        <div class="industry-faq-heading">
            <span class="section-label">FAQ</span>
            <h2>Frequently Asked <span>Questions</span></h2>
        </div>

        <div class="faq-wrapper">

            <div class="faq-item active">

                <button class="faq-question">

                    <span>
                        How is SecureX360 different from a vulnerability scanner?
                    </span>

                    <i>+</i>

                </button>

                <div class="faq-answer">

                    <p>
                        A scanner tells you a vulnerability exists. SecureX360 tells you whether it is reachable, what it would let an attacker access, and proves exploitability through PenX360 validation before your team spends time on it.
                    </p>

                </div>

            </div>

            <div class="faq-item">

                <button class="faq-question">

                    <span>
                        Can it test our mobile apps and open-banking APIs?
                    </span>

                    <i>+</i>

                </button>

                <div class="faq-answer">

                    <p>
                        Yes. SecureX360 covers mobile, web and API attack surfaces, and PenX360 validates whether exposed endpoints are genuinely exploitable — not just flagged.
                    </p>

                </div>

            </div>

            <div class="faq-item">

                <button class="faq-question">

                    <span>
                        Does customer data leave our environment?
                    </span>

                    <i>+</i>

                </button>

                <div class="faq-answer">

                    <p>
                       No. SecureX360 runs entirely on in-region infrastructure, and assessment data never leaves the country or region.
                    </p>

                </div>

            </div>

            <div class="faq-item">

                <button class="faq-question">

                    <span>
                        How often should exposure assessment run?
                    </span>

                    <i>+</i>

                </button>

                <div class="faq-answer">

                    <p>
                        Continuously. Annual penetration tests are stale by the time the report is signed, and banking estates change with every release, integration and partner onboarded.
                    </p>

                </div>

            </div>

        </div>

    </div>

</section>

 @include('partials.indutry-cta')
@endsection