bankwebsiteaudits.com

What It Is

Yennik, Inc. presents its independent Internet and IT security audit services for banks and credit unions through bankwebsiteaudits.com. Founded in 1980, the company focuses on serving the boards of federally insured depository institutions, helping them meet regulatory and fiduciary responsibilities. The website highlights services including bank/credit union website audits, vulnerability and penetration testing, external and internal security testing, and FFIEC/GLBA IT security audits.

Core Capabilities

From a cybersecurity perspective, Yennik is not a standardized SaaS security product, but a consulting and audit-focused service provider. Its coverage includes external and internal penetration testing, vulnerability testing, Internet security audits, and website audits, and it claims to use artificial intelligence in testing to detect known threats and unknown vulnerabilities. Delivery appears to be primarily manual audit work; the site notes that, depending on the size of the institution, IT audits are typically conducted on-site at the financial institution for about one to two weeks. On the compliance side, its services are explicitly centered on FFIEC/GLBA. The principal holds ISACA credentials such as CISM, CGEIT, and CRISC, and has a long background as a bank examiner.

Pricing

The website does not publish packages, one-off testing prices, or subscription models. It asks banks to contact [email protected] using an institutional email address, after which the provider sends information and pricing. This makes it a custom-quote service.

Pros and Cons

Its strengths are its strong focus on the financial sector, with customers across 44 states and asset sizes ranging from $25 million to over $13 billion. The principal has more than 50 years of banking experience and over 21 years of experience as a bank examiner, which should be useful for understanding the language of regulatory examinations. The company also emphasizes that it does not sell hardware or software, giving it a relatively independent position. Limitations include a fairly traditional website and a lack of detail on testing methodology, sample reports, SLAs, automation platforms, alerting capabilities, APIs, or SIEM integrations, leaving limited technical transparency.

Who It’s For

Yennik is better suited to U.S. community banks, credit unions, and small to midsize financial institutions for annual regulatory requirements, board-level risk governance, FFIEC/GLBA IT audits, Internet banking website audits, and internal/external penetration testing. It is less suitable for organizations looking for a global managed security platform, real-time monitoring and alerting, or automated DevSecOps integrations.

Access from China

The source text does not provide information on access from China, Chinese-language support, or cross-border service availability. The domain’s accessibility from mainland China cannot be determined from the available text, so it is assessed as unknown.