CARDIFF, UK, July 14, 2026 – Fintech organisations looking for ongoing assurance over production security now have a new option following the launch of Continuous Runtime Security Validation from Critical Cloud and Tarian Labs. The jointly developed service continuously measures and validates the effectiveness of security controls, helping organisations keep pace with constant changes across cloud platforms, applications and AI systems.
The partnership combines Critical Cloud’s Managed Runtime Assurance capabilities with Tarian Labs’ offensive security specialists, whose backgrounds include government, defence and critical national infrastructure projects.
Managed Runtime Assurance delivers accountable operational management of production environments, ensuring applications, cloud services and AI platforms remain secure, observable, resilient, cost-effective and prepared for compliance requirements. Rather than producing a static assessment, security findings become part of a continuous cycle of remediation, validation and documented completion.
The service follows an Observe, Detect, Validate framework that combines Critical Cloud’s Datadog-powered managed operations with Tarian Labs’ independent testing expertise. Critical Cloud oversees production monitoring and governance, while Tarian Labs conducts penetration testing, infrastructure reviews, cloud security assessments, web application testing, API testing and retesting. Issues identified during testing are remediated, independently verified and formally closed.
To preserve independence, each organisation has separate responsibilities. Tarian Labs owns testing methodology, reporting, severity ratings and retesting, while Critical Cloud is responsible for remediation and ongoing runtime improvements. Every engagement follows agreed customer authorisation, defined scope, documented rules of engagement and secure evidence handling procedures.
“Detection without validation is hope, not assurance,” said James Smith, CEO of Critical Cloud. “Modern fintech organisations need continuous assurance that security controls remain effective as production environments change.”
“Security testing delivers the greatest benefit when organisations can demonstrate measurable improvement,” said Kevin Hanford, Co-Founder and CEO of Tarian Labs. “Our collaboration creates an end-to-end process that combines independent assessment with remediation and proof of resolution.”
Continuous Runtime Security Validation is available across the UK and Ireland, with a packaged joint offering planned in the future. The partnership also includes Welsh fintech events and a live demonstration environment showcasing the complete Observe, Detect, Validate process.
Critical Cloud holds ISO 27001 certification, Cyber Essentials Plus accreditation, and is recognised as both a Powered by Datadog accredited partner and Datadog Advanced Partner. Tarian Labs delivers services through CREST registered practitioners with final sign-off at NCSC-recognised CHECK Team Leader (CSTL-INF) level.
Critical Cloud demonstrates a strong commitment to security, compliance, and operational excellence through a range of internationally recognised certifications and strategic technology partnerships. The company holds ISO 27001 certification, confirming that its information security management systems meet globally accepted standards for protecting sensitive data, managing risks, and maintaining robust security practices. In addition, its Cyber Essentials Plus accreditation highlights its ability to defend against common cyber threats through independently verified technical controls, giving clients greater confidence in the security of their digital environments.
Further strengthening its expertise, Critical Cloud is recognised as both a Powered by Datadog accredited partner and a Datadog Advanced Partner. These achievements reflect the company’s proven capabilities in implementing advanced monitoring, observability, and cloud performance solutions that help organisations improve reliability, optimise infrastructure, and respond quickly to operational issues.
Tarian Labs complements these strengths by delivering specialist cybersecurity services through highly qualified CREST registered practitioners. Every engagement benefits from rigorous technical expertise and industry best practices, with final assessments reviewed and approved at the NCSC-recognised CHECK Team Leader (CSTL-INF) level. This ensures that penetration testing and security assessments are carried out to the highest professional standards, providing organisations with trusted insights, actionable recommendations, and assurance that their critical systems are protected against evolving cyber threats while meeting demanding regulatory and compliance requirements.
