Security testing for APIs compliant with the PSD2 directive, focusing on Strong Customer Authentication (SCA), OAuth 2.0, OpenID Connect, eIDAS certificate management, and validation of RTS requirements for Open Banking. Covers assessment of authentication, authorization, encryption, and regulatory compliance of payment interfaces.