4 februari 2026 Feature

Penetration test

Security is a top priority for us. Zooma is ISO 27001 certified and, as part of our security measures, we commissioned an independent specialist firm to carry out a penetration (pen) test on the Youmie system. No critical vulnerabilities were found, which is a fantastic result.

Een illustratie van twee uitlijningen van cirkelsEen illustratie van een groene cirkel

Pentest

In a pen test, or penetration test, you engage an external group of hackers, who try to find weaknesses in security. This process simulates cyber attacks to identify vulnerabilities in systems, networks and applications. The importance of a pen test lies in proactively identifying weaknesses before malicious actors can exploit them.

By having a pen test performed by an external party, organisations gain insight into their security level and can take targeted measures to strengthen their defences. It not only helps in complying with legal and industry standards, but also strengthens the trust of customers and partners. Moreover, it provides an opportunity to improve incident response, as teams learn how to respond effectively to an actual attack.

In an era when cyber threats are becoming increasingly sophisticated, conducting regular pen tests is not a luxury, but a necessity. Youmie processes student and reunion personal data. Its security is of utmost importance.

Result

Youmie passed the pen test with flying colours! No critical vulnerabilities were discovered, which is a great achievement and testament to the strong security measures we have in place. This result not only confirms the effectiveness of our cybersecurity policies, but also reinforces the confidence of our customers and partners in the security of their data. We are immensely proud of our team who worked hard to achieve this.

ISO 27001

Performing a pen test is key to achieving the ISO 27001 standard, which Zooma has complied with for years. This international standard for information security requires organisations to identify and manage risks. A pen test helps expose vulnerabilities that might otherwise be overlooked. By addressing these vulnerabilities, organisations can improve their information security policies and demonstrate that they are proactively managing risk. This not only strengthens compliance with ISO 27001, but also increases stakeholders' confidence in the security of their data. Regular pen tests are therefore an essential part of a robust security strategy. Should there ever prove to be a vulnerability in the system in the future, we are insured against it and have direct help from security experts at our disposal.