About iGamingThreatLens

iGamingThreatLens is an independent research publication about information security in regulated online gambling. We set out the security requirements gambling regulators impose on operators, and we explain defensive practice for the threats those operators face: account takeover, credential stuffing, bots, API abuse, incidents and third-party risk.

What we cover

Our rules pages cover Great Britain, Canada, the United States and Europe, each requirement tied to the regulator, statute or standard it comes from, with the date we checked it. Our defense guides map common gambling threats to public frameworks such as OWASP, NIST and the UK's National Cyber Security Centre.

We write for defenders. We do not publish attack tooling, exploit details or ways around security controls, and we do not cover markets where online gambling is prohibited.

Independence

iGamingThreatLens is not a security vendor, test house, auditor or gambling operator. We do not sell products, certify anyone, rank vendors or accept sponsored content. Where a page names a company, it is because an official record does.

Who writes it

Pages are researched and written by Martin Huml. Research is assisted by AI tools for finding and organizing sources; every requirement, version number and date is checked against the official document before publication, and secondary sources are labeled. See our method.

Contact and responsible disclosure

Corrections and questions go to hello@igamingthreatlens.online or the contact form. If you believe you have found a security issue on this website, email us without including exploit details and we will reply with a safe way to share them. Please do not send us vulnerabilities in other organizations' systems; report those to the organization or the relevant national CERT.