Capay Global PG
Chengetedzo nekutevedzera mitemo

Chengetedzo yepamwero webhanga, kubva kutanga kusvika kumagumo

Peji iyi inotsanangura, chikamu nechikamu, kuti Capay Global inodzivirira sei kubhadhara kwese, kutumira mari kwese nerekodhi yese. Kutonga kwese kunotsanangurwa pano kunoshanda muhurongwa chaiwo nhasi.

Yakaongororwa kekupedzisira 2026 Mbudzi 3

Kuvimbika nekungotarisa

  • Encryption yeTLS painofamba
  • Encryption yeAES-256 painochengetwa
  • HTTPS inomanikidzwa neHSTS
  • PCI DSS: hapana data yekadhi pamasystem edu
  • Hurongwa hwezvidzoro hweSOC 1 neSOC 2
  • Kusimbisa kwematanho maviri
  • Kupatsanurwa kwedata pamutsara mumwe nemumwe
  • Audit trail isingachinjiki
  • Kutumira mari nemaker-checker
  • KYB, AML nekutarisa sanctions
  • Kuongororwa kwakazara kwechengetedzo, Gumiguru 2026

Chengetedzo nenhamba

0
nhamba dzemakadhi dzakambochengetwa pamasystem edu
100%
ematafura edatabase ari pasi pechengetedzo yepamutsara
7
makore ekuchengetwa kwe-audit inongowedzerwa chete
2
vabvumiri pakutumira mari kwese kunopfuura muganhu wako
300
masekonzi link yegwaro isati yapera
400
mazuva emalog ekupinda pa-edge anochengetwa kuti zviferefetwe

Matiratidzira: audit, kugadzirisa, kuedza, audit zvakare

Hatitangi ne penetration test. Tinotanga taita audit ye production yese, togadzirisa zvawanikwa ne audit, tokoka chikwata chakazvimirira kuti chiedze kupinda, tozoita audit zvakare kuti tisimbise kuti zvakagadziriswa zvakabata.

  1. 01

    Audit ye production muzvikamu 13

    Ongororo yakazara ye platform iri kushanda: authentication, database, API, nzira dzemari, hosting, deployment, monitoring, recovery nezvimwe. Yakapera muna Gumiguru 2026.

  2. 02

    Kugadzirisa zvakawanikwa ne audit

    Zvinetso zvakakomba nezvepamusoro zvakagadziriswa uye zvikaongororwa usiku ihwohwo. Chese chasara chine muridzi uye chiri kupedzwa, tichitanga nezvinochengetedza mari nekupinda.

  3. 03

    Penetration test yekunze

    Kambani yakazvimirira yechengetedzo icharwisa platform nemvumo yedu, kuti iwane chero chinhu chakasiyiwa nekugadzirisa kwedu. Vatengi vanogona kukumbira mushumo mupfupi pasi pe NDA.

  4. 04

    Audit yechipiri

    Tinodzokorora audit yezvikamu 13 kuti tisimbise kuti kugadzirisa kwese kwakabata, tozovandudza scorecard iri papeji rino.

Production scorecard: zvikamu 13

Zvinodzivirira chikamu chimwe nechimwe chepuratifomu nhasi, zvakaongororwa muongororo yedu yehurongwa yaGumiguru 2026.

  1. 01

    Authentication nekupinda

    Kusimbisa kwematanho maviri kune vatengesi nevashandi, mvumo zvichienderana nebasa, nemagedhi ekupinda anovharika kana paine dambudziko.

  2. 02

    Database nekuparadzanisa data

    Row-level security patable yese, kuti bhizinesi rigone kuverenga data raro chete, uye function yese ine simba inotanga yaongorora basa reanoidaidza.

  3. 03

    API ne webhooks

    API keys dzakaitwa hash, rate limits pa key yega yega uye pa IP yega yega, IP allowlists, ne webhooks dzakasainwa dzakachengetedzwa kubva ku replay.

  4. 04

    Kutendeka kwemari

    Double-entry ledger, journals dzinofanira kuenzana, idempotency pakudaidza kwese kwemari nekubvumirwa nevanhu vaviri pa payouts.

  5. 05

    Encryption nezvakavanzika

    TLS panguva yekufambiswa, AES-256 panguva yekuchengetwa, nezvakavanzika mumatafura akakiyiwa asingagoni kuverengwa nechirongwa chipi zvacho uye asingambooneswi nerekodhi ipi zvayo.

  6. 06

    Hosting ne edge

    AWS CloudFront kuseri kwe Cloudflare, kuchengetwa kwakavanzika chete, HTTPS inomanikidzwa ne HSTS ne browser headers dzakasimba.

  7. 07

    Deployment nekutonga shanduko

    Kuburitswa kunoitwa nemascript ane ongororo dzekuchengetedza mukati, ongororo dzepakarepo mushure mekuburitswa kwega kwega, nekutamiswa kwedata kunogona kudzokororwa zvakachengeteka.

  8. 08

    Monitoring nekunyevera

    Ongororo dzehutano hwevapi vebasa, yambiro dzemari yewallet, ongororo dzebhuku remari, zvinodzima circuit nepeji yemamiriro eruzhinji.

  9. 09

    Logging ne audit trail

    Audit log inowedzerwa chete inochengetwa makore manomwe, request id pakudaidza kwese kwe API ne edge access logs dzinochengetwa mazuva 400.

  10. 10

    Kukura nekusimba

    Rate limits, kill switches ne circuit breakers zvinomisa nzira yekubhadhara iri kukundikana pasina kumisa dzimwe.

  11. 11

    Kudzoreredza nekuenzanisa

    Ongororo yebhuku remari husiku hwega hwega, kuongororazve mamiriro pachayo kuitira kuti pasave nekubhadhara kunosara kwakarembera, uye kuedzazve kwakachengeteka kusingatombobhadharisi kaviri.

  12. 12

    Kupindura incident

    Hurongwa hwakanyorwa hwekupindura zviitiko hune mazinga ekuoma, mabasa akatumidzwa, makiyi ekumisa anomisa nzira yekubhadhara mumasekondi, nekuzivisa vatengi.

  13. 13

    Kutevedzera mitemo nekuvanzika

    Ongororo yeKYB, AML nezvirango bhizinesi ripi zvaro risati ratanga kushanda, kutarisa kunoenderera mberi, uye hapana data yemakadhi pamasystem edu.

Danho rega rega rekubhadhara, rakachengetedzwa

Tevera kubhadhara kumwe chete kubva pafoni yemutengi wako kusvika pa-balance yako uone kuti chidzoro chipi chinorinda danho rega rega.

  1. 1

    Mutengi wako anobhadhara

    Pa-hosted checkout kana link yekubhadhara inopihwa neTLS. Nhamba dzemakadhi hadzimbosviki kuCapay Global; kubvumira kwemobile money kunoitwa pafoni yemutengi pachake.

  2. 2

    Integration yako inoshevedza API

    Inosimbiswa nekiyi yakahashwa uye yakatarwa; ine muganhu wezvikumbiro pakiyi imwe neimwe nepa-IP imwe neimwe; chikumbiro chega chega chinotakura idempotency key ne-request id, uye data ine chimiro chekadhi inorambwa pa-edge.

  3. 3

    Ledger inozvinyora

    Mutsara we-intent unovapo mupi wese asati ashevedzwa uye credit inobva pa-intent iyoyo, kwete kumutengi. Journal yega yega inofanira kuenzana kana kuti database inoiramba.

  4. 4

    Mupi anosimbisa

    Ma-callback anoongororwa signature pa-body isina kugadziriswa nekuenzanisa kwenguva yakafanana, anobviswa zvakadzokororwa kudzivirira replay, uye chinyorwa chemupi pachake chinotorwazve chero chinhu chisati chashandiswa.

  5. 5

    Unotumira mari

    Vanogamuchira vanotariswa, kutumira mari kunopfuura muganhu wako kunomirira mubvumiri wechipiri ane danho rekusimbisa kwematanho maviri, kunoenda mari kunovharwa mushure mekubvumirwa, uye ma-circuit breaker anomisa nzira iri kukundikana.

  6. 6

    Unoona zvese

    Kupinda mudashboard kuseri kwekusimbisa kwematanho maviri, data yakapatsanurwa pabhizimisi rega rega nechengetedzo yepamutsara, mawebhook akasainwa kumasystem ako, uye audit trail isingagoni kuchinjwa.

Dziviriro yakadzika, matanho mana

Danho rega rega rinotora kuti riri pamusoro paro rinogona kukundikana. Chikumbiro chinofanira kupfuura ese mana chisati chabata mari.

  1. 01Edge
    • Cloudflare neAWS CloudFront
    • TLS pa-connection yega yega
    • HTTPS inomanikidzwa neHSTS
    • Kudzora kupinda pa-origin, hapana bucket yakavhurika
    • Ma-header ebrowser akaoma
    • Malog ekupinda anochengetwa mazuva 400
  2. 02Application
    • Ma-API key akahashwa neSHA-256
    • Miganhu yezvikumbiro pakiyi nepa-IP
    • Idempotency pakushevedza kwese kwemari
    • Murindi wedata yekadhi pakupinda
    • Mawebhook akasainwa, anodzivirirwa ku-replay
    • Sandbox yakapatsanurwa kubva kuvapi chaivo
  3. 03Data
    • Chengetedzo yepamutsara patafura yega yega
    • Encryption yeAES-256 painochengetwa
    • Matafura ezvakavanzika asingapindwi zvachose
    • Audit log inongowedzerwa chete
    • Kuchengetwa kwemakore manomwe
    • Nzvimbo yakavanzika yemagwaro, malink emasekonzi 300
  4. 04Mari
    • Ledger ye-double-entry mumayunitsi madiki
    • Kumanikidzwa kwe-journal yakaenzana
    • Maker-checker ine kusimbisa kwematanho maviri
    • Switch dzekumisa nema-circuit breaker
    • Kutarisa float pawallet yega yega
    • Murindi wekuenzanisa mabhuku weusiku

Encryption painofamba nepainochengetwa

  • TLS pa-connection yega yega: mabrowser, maAPI, mawebhook nemalink evapi. HTTPS inomanikidzwa padomain yega yega yeCapay Global neHTTP Strict Transport Security.
  • Encryption yeAES-256 painochengetwa pamadatabase nenzvimbo dzekuchengetera mafaira, inotarisirwa nekuchengetwa kwemakiyi kunotsigirwa nehardware kwevapi vehurongwa hwedu.
  • Zvakavanzika (ma-credential evapi, zvakavanzika zvemawebhook, idempotency key) zvinogara mumatafura asingapindwi zvachose asingagoni kuverengwa nechero role yeapplication; zvinovanzwa mulog yega yega nemutsara wega wega we-audit.
  • Magwaro ekuongororwa anochengetwa mu-bucket yakavanzika, akatarwa pafolder yebhizimisi pacharo, uye anovhurwa chete nemalink akasainwa emasekonzi 300.

PCI DSS: platform isina data yemuridzi wekadhi

  • Hatimbogamuchiri, hatichengeti, hatishandisi kana kutumira nhamba yekadhi kana CVV. Murindi wepakupinda anoramba data ine chimiro chekadhi mu-body yega yega yeAPI uye trigger yedatabase inoiramba pakutambira mari, kutumira mari nekudzosera mari.
  • Kubhadhara nemakadhi, pakunopihwa, kunoitwa pamapeji akahostwa anoshandiswa mukati memuganhu wePCI DSS wevabatsiri vedu; Capay Global inongobata ma-reference akavanzwa chete.
  • Makadhi evirtual anoburitswa kuburikidza nemubatsiri ane rezinesi; nhamba yekadhi yakazara haimbochengetwi pamasystem edu.

Kuvimbika kwemari

  • Ledger ye-double-entry mumayunitsi madiki: kufamba kwemari kwega kwega i-journal yakaenzana ine reference yakasiyana, uye trigger yedatabase inoramba chero journal isina kuenzana.
  • Idempotency pakushevedza kwese kwemari: mitsara inotanga yachengeterwa, ma-reference e-journal akasiyana uye kiyi imwe cheteyo inotumirwa kumupi, saka kuedzazve hakumbogoni kubhadharisa kana kubhadhara kaviri.
  • Mvumo dzemaker-checker pakutumira mari, kugadzirisa nekuchinja mari (FX), ine danho rekusimbisa kwematanho maviri kumubvumiri.
  • Switch dzekumisa panzvimbo yega yega yekupinda, ma-circuit breaker pakukundikana kwekutumira mari, kutarisa float pawallet yega yega uye murindi weledger weusiku anoenzanisa mabhuku.
  • Sandbox haigoni zvachose kusvika kumupi chaiye.

Chitupa nekupinda

  • Kusimbisa kwematanho maviri (TOTP) kuvatengesi nevashandi; magedhi anovhara pane kusava nechokwadi, haambovhuri.
  • Chengetedzo yepamutsara patafura yega yega: bhizimisi rinongogona kuverenga mitsara yaro chete, zvinomanikidzwa nedatabase, kwete nekodhi yeapplication.
  • Mvumo dzinoenderana nebasa kuchikwata chako (muridzi, mari, mugadziri, rubatsiro) nekuchikwata chedu; chiito chega chega chinoda mvumo yakakosha chinotanga chasimbisa mvumo.
  • Mutemo wepassword une kuongorora mapassword akaburitswa, makodhi anoshandiswa kamwe chete anokurumidza kupera, kupinda kune muganhu wekuedza, uye ma-session anopera pakubuda nema-cache achibviswa.
  • Kukokwa kwema-admin, kuchinjwa kwemabasa nekudzimwa zvinoongororwa uye zvinotanga kushanda pakarepo.

Chengetedzo yeAPI nemawebhook

  • Ma-API key anohashwa neSHA-256; prefix chete ndiyo inochengetwa uye kiyi inoratidzwa kamwe chete painogadzirwa.
  • Miganhu yezvikumbiro pakiyi imwe neimwe nepa-IP imwe neimwe, malist ema-IP anobvumirwa ekusarudza, miganhu yekushandisa mari yezuva, zvirambidzo zvenyika nezvenzira, uye kuchinjwa nekudzvanya kamwe chete.
  • Simba rekushandisa mari chaiyo pamakiyi e-agent rinovhurwa zvakasiyana uye kuseri kwekusimbisa kwematanho maviri chete.
  • Mawebhook anobuda anosainwa neHMAC ane nguva dzakanyorwa nedziviriro ye-replay; ma-callback anopinda kubva kuvapi anosimbiswa pa-body isina kugadziriswa nekuenzanisa kwenguva yakafanana, uye chokwadi chemupi chinotorwazve chero mamiriro asati achinjwa.

Chirongwa chekutevedzera mitemo

  • KYB usati waenda live: magwaro ekunyoresa, varidzi chaivo vebhizimisi, kutarisa sanctions uye kubvumirwa nevanhu vaviri.
  • Kutariswa kweAML kunoenderera mberi kune maitiro akajeka ekugadzirisa, kuvandudzwa kweKYB nguva nenguva uye chiyero chenjodzi pabhizimisi rega rega.
  • Zvinyorwa zvemari nemalog e-audit zvinochengetwa kwemakore manomwe mumatafura anongowedzerwa chete anorambidza kuchinja nekudzima padanho redatabase.
  • Zvidzoro zvakaenzaniswa neTrust Services Criteria dzeSOC 1 neSOC 2 (chengetedzo, kuwanikwa, kuvanzika, kuvimbika kwekushandisa) uye nemamiriro ePCI DSS ekusava nedata yemuridzi wekadhi.
  • Kuongororwa kwakazara kwechengetedzo yeplatform iri kushanda (database, kusimbisa chitupa, kupihwa kwewebhu, API, nzira dzemari, browser) kwakapedzwa muna Gumiguru 2026, chese chakawanikwa chakagadziriswa kana kupihwa muridzi wacho.

Hurongwa nemashandiro

  • Masaiti nema-app zvinopihwa kubva kuAWS CloudFront kuseri kweCloudflare, zvine kudzora kupinda pa-origin uye bucket yega yega yekuchengetera yakavanzika.
  • Ma-header ebrowser akaoma: kuiswa mu-frame kwakarambidzwa, Content-Security-Policy frame-ancestors none, Permissions-Policy nekupatsanurwa kwe-cross-origin opener.
  • Malog ekupinda pa-edge anochengetwa mazuva 400 kuti zviferefetwe; ma-request id, ma-IP nema-user agent pakushevedza kwega kwega kweAPI.
  • Kuongororwa kwema-dependency pa-build yega yega, peji yemamiriro iri pachena, kuongorora hutano pamupi wega wega uye yambiro dzezviitiko kuchikwata chemashandiro.

Panogara data rako

Mhinduro dziri pachena kumibvunzo ye residency iri mu security review yese.

  • Database ye platform nemagwaro

    Zvinochengetwa pa Amazon Web Services kuburikidza ne database provider wedu, uye zvine encryption ye AES-256 pazvinochengetwa.

  • Websites, dashboard ne checkout

    Zvinopihwa pasi rose kubva ku edge network ye Amazon CloudFront kuseri kwe Cloudflare, kuti mapeji avhurike pedyo nevatengi vako. Hapana marekodhi evatengi anochengetwa pa edge.

  • Vabatsiri pakubhadhara

    Ruzivo runodiwa kupedzisa kubhadhara runopihwa chete kuvabatsiri ve mobile-money, mabhanga nemakadhi vane rezenisi vanozviita.

  • Kupinda kwechikwata chedu

    Vashandi vakabvumirwa chete ndivo vanogona kuvhura marekodhi evatengi, kuburikidza nemvumo zvichienderana nebasa, uye chiito chese chine simba chinonyorwa mu audit log isingagoni kuchinjwa.

Kana chimwe chinhu chikakanganisika

Matinobata security incident, kubva pakunyevera kwekutanga kusvika pakuongorora kwekupedzisira.

  1. 01

    Kuona

    Kunyevera kwega pakukundikana kwe provider, wallet float, ledger isingaenderane nezviito zvisingawanzoitika kunosvika kuchikwata chedu che operations.

  2. 02

    Kudzivirira

    Kill switches ne circuit breakers zvinomisa nzira yekubhadhara yakakanganiswa mumasekondi mashoma, uye keys kana sessions dzakaonekwa dzinogona kubviswa pakarepo.

  3. 03

    Kuzivisa

    Vatengi vakakanganiswa vanonzwa zvakaitika, zvazvinoreva kwavari nezvatiri kuita, pasina kunonoka kusina basa uye mukati menguva inodiwa nemutemo.

  4. 04

    Kudzidza

    Incident yese yakakomba inopera neongororo yakanyorwa nekugadzirisa kunoidzivirira kuti isadzokororwe.

Hurongwa hwedu hwakanyorwa hwekupindura zviitiko hunogadza mazinga ekuoma, mabasa, nguva dzekupindura nekuzivisa vatengi. Vadyidzani nevatengi vakuru vanogona kukumbira kopi pasi peNDA.

Zvatinokumbira kwauri

Chengetedzo inogoverwa. Tsika nhatu dzinochengeta account yako yakasimba seplatform iri pasi payo.

  1. 1Vhura kusimbisa kwematanho maviri kune mumwe nemumwe wechikwata chako, kutanga nevaridzi nevemari.
  2. 2Chengeta ma-API key mu-secrets manager, kwete mukodhi, uye uachinje kana vashandi vachinja.
  3. 3Isa muganhu wekubvumira kutumira mari ne-list yema-IP anobvumirwa pamakiyi ako e-production.

Mitemo nemagwaro

Mapepa ari kuseri kwezvidzoro, akaburitswa uye anogara achigadziridzwa.

Mibvunzo yechengetedzo, yakapindurwa

Data yangu ine encryption here?

Hongu. Connection yega yega kuCapay Global inoshandisa TLS, uye data ine encryption yeAES-256 painochengetwa. Zvakavanzika zvinochengetwa mumatafura akakiyiwa uye hazvimbooneki mumalog.

Munochengeta nhamba dzemakadhi here?

Kwete. Capay Global haimbogamuchiri, haichengeti, haishandisi kana kutumira nhamba yekadhi kana CVV. Data yekadhi inorambwa pa-edge yeAPI nemukati medatabase, uye kubhadhara nemakadhi kunoitwa chete pamapeji akahostwa mukati memuganhu wePCI DSS wevabatsiri vedu.

Munotevedzera SOC 2 nePCI DSS here?

Hurongwa hwedu hwezvidzoro hwakaenzaniswa neTrust Services Criteria dzeSOC 1 neSOC 2, uye platform inoshanda mumamiriro ePCI DSS ekusava nedata yemuridzi wekadhi. Vabatsiri nevatengi vemakambani makuru vanogona kukumbira tsananguro yechengetedzo, matrix yezvidzoro nehumbowo hwevapi vedu.

Mumwe munhu paCapay Global anogona kufambisa mari yangu here?

Hapana munhu mumwe chete anogona. Kutumira mari kunopfuura muganhu wako kunoda mubvumiri wechipiri kudivi rako, zviito zvinoda mvumo yakakosha kudivi redu zvinoda mvumo nechikonzero chakanyorwa uye zvinosiya chinyorwa che-audit chisingagoni kuchinjwa, uye ledger inoramba chero kufamba kwemari kusina kuenzana.

Ndinozivisa sei chikanganiso chechengetedzo?

Nyorera chikwata chedu cherubatsiro nezvese zvakadzama; report yega yega inobvumwa uye inobatwa nekukurumidza. Tinokumbira kuzivisa nehanya uye hatimbotevereri vaongorori vane mwoyo wakanaka.

Makamboita penetration test here?

Tinotevera rongedzo yakasimba: kutanga ongororo yakazara yehurongwa (yakapera muna Gumiguru 2026), kozoti kugadzirisa, kozoti bvunzo yekupinda yakazvimiririra, kozoti ongororo yechipiri kusimbisa kuti kugadzirisa kwakamira. Vadyidzani nevatengi vakuru vanogona kukumbira pfupiso yeongororo yedu uye, kana yaburitswa, pfupiso yebvunzo yekupinda pasi peNDA.

Data rangu rinochengetwa kupi?

Database ye platform nemagwaro zvinochengetwa pa Amazon Web Services, zvine encryption ye AES-256 pazvinochengetwa. Websites nemapeji e checkout zvinopihwa kubva ku edge network yepasi rose isingachengeti marekodhi evatengi.

Kuzivisa nehanya

Vaongorori vechengetedzo vanogamuchirwa. Kana uchifunga kuti wawana chikanganiso chechengetedzo muCapay Global, tiudze pachivande uye utipe nguva yakakodzera yekuchigadzirisa. Tinobvuma report yega yega uye hatimbotevereri kuongorora kunoitwa nemwoyo wakanaka.

  1. 1Tumira ruzivo kuchikwata chedu: zvawawana, kupi, uye maitirwo azvo zvakare.
  2. 2Tinosimbisa kuti tazvigamuchira uye tinokuzivisa kusvika zvagadziriswa.
  3. 3Tipe nguva yakakwana yekuzvigadzirisa usati wazvizivisa pachena.
Zivisa chikanganiso chechengetedzo

Uri kutitumira security questionnaire?

Itumire chibvumirano chako chisati chaitwa, kwete mushure. Tinoipindura nepeji rino ne scorecard, uye pasi pe NDA, tsananguro yedu yakadzama yechengetedzo, control matrix ne attestations dzema providers edu.

Tanga kutambira mari muAfrica yose nhasi

Vhura account yemahara, uvake uchishandisa sandbox, wozoenda live mushure mekuongororwa.

Vhura account

Tiudze nezvemakorido ako nehuwandu hwemari chero nguva.