Case Study: Yellow Card (cryptocurrency exchange) achieves continuous, GitHub-integrated mobile security with NowSecure

Yellow Card - Customer Case Study

Yellow Card is a fast-growing African cryptocurrency fintech launched in Nigeria in 2019 that now operates in 20 countries and has handled nearly $2 billion in transactions. With a biweekly release cadence, ~35 app developers and only two security analysts, the company faced a gap in continuous mobile app security testing and needed a DevSecOps-friendly solution that reduced false positives and didn’t slow development.

Yellow Card integrated NowSecure Platform into GitHub to run automated SAST/DAST/IAST checks, receive dev-friendly tickets with remediation guidance, and supplement automation with NowSecure’s manual PTaaS and guided testing. The result was faster, continuous security feedback directly in the CI pipeline, improved coverage and reduced risk, fewer release blockers, and a smoother remediation workflow that the CISO praised — with plans to extend testing to OWASP MASVS compliance.

Yellow Card

Micha Katz

Chief Information Security Officer