Screening Penetration Testing

Optimize your firm's screening systems with Malverde. Leveraging AI-generated test data, we can help you to rigorously test your screening controls, provide comprehensive benchmarking reports and actionable insights.

Test Name	DOB	Nationality	Modification	Target Name	Match identified by system?	No match reason

Synthetic Test Data

Screening Engine

Identified

86.7%

Missed

13.3%

False Positives

6.2%

Gain confidence your screening systems are compliant

Malverde's penetration testing solution provides you with a completely transparent view of which sanctioned individuals and entities you will and will not identify.

Benchmark your false positives

Use our synthetic data to model your customer base and international payments to accurately predict the number of false positives your screening systems will generate.

Bank Customer Demographic

Synthetic Customer Data

Name (50% Common / 50% Rare)

Gender (Male 60% / Female 40%)

Nationality (UK 70% / Others 30%)

Age (18-30 25% / 31-50 50% / 51+ 25%)

Screening Engine Configuration

Optimizing settings to balance effectiveness and efficiency

Optimise your screening detection models

Our data can be used to iteratively tune your screening detection models to optimise effectiveness and efficiency.

Our test data

Smarter test data, built for your screening system.

Always current — sanctions lists refreshed daily
Test fuzzy matching — up to 23 name variations available for selection
Targeted scope — focus on your choice of individuals, entities, vessels, and aircraft
Fill the gaps — auto-populate missing fields like DOB if required by your screening system
Customise fields – choose specific fields to include sanctioned data for screening, or use our pre-selected default (payments only)
Plug-and-play — export data in your vendor's required format
Realistic data — AI-driven populations that mirror your customer demographic

Results Analysis

Clear insights to tune, prove, and improve performance.

Quick insights – upload results and see key metrics instantly
Spot misses – find records that slipped through undetected
Measure change – track improvements after config updates
Fine-tune risk – balance effectiveness vs efficiency
Benchmark – compare against peers (and same-vendor users)
Pinpoint weaknesses – surface manipulations your system struggles with

Payment testing

Generate both MT103 and ISO 20022 payments to test your screening system.

Vendor-ready - Set custom BICs, formats and more, ready for your system
Targetted testing – Choose where sanctioned data appears across payment fields
Varied Testing – Choose from 14 different tests from FIs to RPCs
Multi-List– embed hits from the FCDO, OFAC, EU, UN, and ASC lists
Realistic payment flows– configure inbound/outbound mix, amounts and currencies

PEPs Screening

Test your PEP screening system with a fully customisable data set.

Always Current - All our PEPs are checked and re-catergorised weekly
Global PEP Coverage – access PEPs from 10 Jurisdictions and 146 countries
Wide Ranging – test current, recent and past PEPs and RCAs
Upload and analyse – see the same clear insights and metrics as with sanctions
Reduce Blind Spots – catch gaps before newly public PEPs appear in your production feeds

Our plans

Choose a plan that suits your organisation's needs.

Free

£0

Validate your customer screening system using an always up-to-date, ready-to-go data set

Automated FCDO data for testing your screening system
Up to 120k test records derived from sanctioned names to test fuzzy logic generated in real-time
Documentation to guide you through the testing process
Download your test data today

Premium (Beta)

£495^+VAT / year

Comprehensively test your sanctions screening systems using fully customisable data to benchmark both effectiveness and efficiency

Customer screening test data
Tailored effectiveness data to suit your business including all major sanctions regimes
Synthetic customers records based on UK-population to forecast your alert volumes
Generation of data in 'ready to use' format
Rapid roll out of new features!

Enterprise

£POA

Independent benchmarking of your customer or payments screening systems to give you confidence in compliance

End-to-end testing of customer screening system performed by our experts
Benchmarking report providing transparent view of system performance
Actionable recommendations for improving system performance based on a detailed understanding of your system configuration

Area	Detail	Free	Premium	Enterprise
Sanctions Lists	FCDO	✅	✅	✅
	OFAC		✅	✅
	UN		✅	✅
	EU		✅	✅
	Australian consolidated list		✅	✅
Historic sanctions list data	Ability to select historical snapshots of sanctions lists (coming soon!)		✅	✅
Name manipulations	Select manipulations	✅	✅	✅
Name manipulations	All manipulations		✅	✅
Entity types	Individuals	✅	✅	✅
	Entities	✅	✅	✅
	Vessels	✅	✅	✅
	Aircraft		✅	✅
Efficiency data	Efficiency testing data	✅	✅	✅
PEP data	UK PEP records (coming soon!)		✅	✅
Test data types	Names	✅	✅	✅
Test data types	Payments (coming soon!)		✅	✅
Output format customisation	Column selection and ordering (coming soon!)		✅	✅
	Data type format customisations		✅	✅
	Vendor specific default output specifications (coming soon!)		✅	✅
Population of missing fields	Day/month/year of birth	✅	✅	✅
	Nationality	✅	✅	✅
	Country of residence	✅	✅	✅
	Country of birth	✅	✅	✅
	Gender	✅	✅	✅
Results analysis	Ability to upload results data, create dashboards and understand KPIs (coming soon!)		✅	✅
	Creation of standard report PDF based on test results (coming soon!)		✅	✅
Malverde support	3 hours of support time to be drawn down		✅	✅
Ingestion of test data into screening engine	Support to push data through your test environment		✅	✅
Independent performance report	Guaranteed benchmarking of your performance and bespoke recommendations for improvement			✅
Supplementary services as required	Ensuring your screening is fit for purpose given your customer base, services, jurisdiction and risk appetite.			✅

FAQs

Breaching financial sanctions is a strict liability offence. This means that if a firm breaches sanctions, it is up to the firm to prove they had no way of knowing they were in breach — a high bar to meet. Even if breaches haven't occurred, regulators can still fine firms for inadequate systems and controls.

Recent regulatory activity underscores the importance of robust screening:

In the UK, the FCA's Sanctions Module Assessment Proactive Programme (MAPP) tests banks' systems using files of sanctioned names and variations to evaluate their effectiveness, including fuzzy logic matching
In the EU, the European Banking Authority (EBA) now requires regular monitoring of sanctions screening controls' effectiveness
Some major UK firms have been found non-compliant: for example, the FCA confirmed a firm was only screening a fraction of the OFSI consolidated sanctions list, rather than the full list
OFSI continues to disclose breaches of financial sanctions

It is crucial for firms to test their customer and payment screening systems pre-emptively to ensure they are performing correctly before any regulatory review.

Malverde provides a comprehensive test suite for evaluating your screening systems. Unlike other providers, the data is readily available online, including OFSI test data free of charge. For firms needing an independent review, we also offer a full end-to-end testing service at market-leading rates.

1 Register with your business email

2 Use wizard to generate test data

3 Download datasets

4 Push data into system

5 Evaluate results and perform analysis

6 Adjust configuration & re-test

Once you upload your system's results to the Malverde test portal, you can:

Benchmark performance against expected results
See which areas are performing well and which require improvement
Drill down into specific test cases for detailed analysis

Even well-configured systems can generate large numbers of irrelevant alerts, leading to high operational costs and distraction from genuine risks. Testing with production data is often limited due to information security restrictions.

Malverde's AI-driven synthetic data addresses this by generating realistic test records for your customer base and payments flows, including:

Names, gender, nationality
Origin and destination countries of payments
National and organisational distributions

Processing this synthetic 'efficiency' data through your screening system allows you to forecast false positive volumes accurately in a test environment, helping optimise your system's efficiency.

Effectiveness

Efficiency (false match rate)

100%

87.5%

75%

10%

Effective and Efficient

Effective but Inefficient

Ineffective but Efficient

Ineffective and Inefficient

Other Screening implementations

Same Vendor

Your System

Yes. Using Malverde's test suite, you can iteratively improve screening models in a test environment before deploying them to production. By analysing both effectiveness and efficiency, you can:

Understand the impact of configuration changes
Select the optimal model for your organisation
Minimise operational disruption while maximising compliance coverage