Zepto

Zepto is an Australian fintech company, founded in 2017, that builds real-time account-to-account payment infrastructure. The company was the first non-bank fintech approved to connect directly to Australia's New Payments Platform (NPP) as a Connected Institution for PayTo. It also became the first non-bank payments provider to achieve Accredited Data Recipient status under the Consumer Data Right framework. The team of approximately 100 employees operates out of Byron Bay, Melbourne, and Sydney.

The security surface here is significant: Zepto's platform handles live payment rails - NPP Payments, PayTo, Direct Debit, Enterprise PayID, and Stored Value capabilities for digital wallets. These systems sit between banks, enterprise merchants, and payment platforms, processing real-time financial transactions with direct NPP connectivity. That means the threat model includes API abuse, credential compromise, fraud at scale, data exfiltration under CDR obligations, and the integrity of payment instructions moving through critical financial infrastructure.

Rebranded from Split Payments in 2021, the company is self-described as bootstrapped. Technical work spans real-time payment processing, API-powered payment solutions, and the infrastructure layer connecting to Australia's banking ecosystem. For security engineers, the draw is straightforward: protecting systems where a single flaw can mean real money moving to the wrong place in real time.