Yes, the tests are conducted within the process of code review and code scan during development, and by the QA team, during the testing process. The company meets the requirements accepted in the industry (OWASP) as part of meeting these requirements, an orderly process of configuration management is administered, and security updates are required. All the company's infrastructures are managed in AWS and Office365 Microsoft, occasionally, relevant security updates are carried out as needed: hardening, software and security updates, ongoing examination of the architecture and its adaptation to the changing information security risks, code scans by a third party, etc. On top of that, there is a regular PT done by 3rd party.