Our internet bank app is not finished yet, but is is already 100% secure without any pentests (and manager access should be working already)
Note from security:
I suspect there might be an XSS somewhere, but I don't have time to check it out yet - our managers look at the links they get before clicking, do they?
Bank main page
Contact out manger to get support