Penetration testing activities aimed at verifying PSD2 compliance, the European directive that imposes stringent security requirements for payment services and open banking. Covers Strong Customer Authentication (SCA), API security for Third Party Providers (TPP), sensitive data protection, environment segregation, and operational resilience. Mandatory for Payment Service Providers (PSP), Account Servicing Payment Service Providers (ASPSP), and TPPs operating in the European market.