Bubble successfully passed another independent penetration test

At Red Cactus, the security of customer data and the reliability of our integrations are paramount. That is why we once again subjected our integration tool Bubble to a thorough penetration test conducted by an independent, specialized party. These periodic tests are an integral part of how we develop and maintain software and give us a clear view of the current resilience of our applications. We invest in this deliberately—not only time and expertise, but also a significant budget—to guarantee our partners the highest possible quality and assurance.

Results and follow up

The recent penetration test confirmed that the Bubble integration tool is currently very solid. No noteworthy findings emerged. The few low priority recommendations from the test were implemented immediately, contributing to the ongoing improvement and refinement of Bubble. Because a penetration test is always a snapshot in time, we repeat this process periodically and keep security under continuous monitoring.

Why we perform this periodically

Carrying out penetration tests on a regular basis is essential for us. It provides both us and our partners with insight into the current resilience of our software and supports achieving and maintaining important certifications that our partners and their customers rely on. In addition, several Red Cactus partners and CRM vendors independently conduct penetration tests on our software. This means our application is assessed outside our own schedule as well, offering an extra layer of control and transparency.

Security as the core of our vision

The integrations developed by Red Cactus stand out for their responsible and secure approach to data access—something that is unfortunately not always a given in the world of CRM integrations. We consciously choose real time communication with the CRM so that customer data remains within the CRM environment itself. As a result, customers and partners always know where their data resides, without unnecessary copies being stored. This approach aligns perfectly with our vision of GDPR compliant integrations and reduces the risks that arise when data is stored outside the CRM. In addition, most of our integrations are, where possible, certified by CRM and telecom providers that offer an official certification program.

Always one step ahead

By planning penetration tests on a regular basis and encouraging our partners to do the same, we ensure that Red Cactus solutions remain as resilient as possible not only today but also tomorrow. This way our customers can trust that we continuously work on improving and safeguarding the security of our software.