Quote:

About our Online Banking test MRG Effitas published an Online Banking Browser Security Report every year. Since 2013, a single report has been replaced by quarterly assessments. This report is the assessment for Q22019. While similar to our previous reports, it employs more sophisticated assessments that result in an extremely accurate level of efficacy assessments, so much so that we now award quarterly certifications to products that meet specific assessment criteria.

We provide two levels of testing: Level 1, where we test a vendor’s product and provide a report for that quarter’s assessment, and Level 2 (which incorporates Level 1), where we liaise with vendors during testing, alerting them to any issues found with their technology and providing the engineering and technical support required for them to counter these issues. Level 2 participation serves as an external QA service for vendors, helping them improve the efficacy of their product. Level 1and 2reports are published separately. This is a Level1 report.

Early in our online banking work we recognised that although many vendors protect their clients’ browsers from data exfiltration, the techniques employed were not effective against financial malware. Since then we have been at the forefront of online banking testing and are the only testing house in the world whose tests map 100% against in-the-wild threats.