Papers AG launches Obsidio for DDoS resilience testing

Papers AG has launched Obsidio, a Swiss-engineered platform for realistic DDoS resilience testing aimed at banks and critical infrastructure operators. The tool is designed to help organizations document operational resilience for Swiss and European regulatory requirements, including FINMA, DORA and NIS2.

Why it matters: - Banks, insurers and critical infrastructure operators are under growing pressure to prove they can withstand cyberattacks. - Obsidio is built to move resilience testing from one-off simulations to continuous, realistic verification. - The platform is designed to generate documentation that supports audit and reporting needs under FINMA, DORA and NIS2.

What happened: - Papers AG, a Zug-based software company, introduced Obsidio as a DDoS resilience testing solution. - The launch comes as global cyber threats and the vulnerability of critical digital infrastructure continue to rise. - The platform is already in use by banks, including recognized financial institutions. - Alessandro De Carli, CEO of Papers AG, said Obsidio turns cyber resilience management from reactive damage control to proactive verification of defense systems.

The details: - Obsidio uses a globally distributed infrastructure of more than 232,000 smartphones to replicate realistic distributed denial-of-service attacks. - Conventional security tests often rely on artificial laboratory environments, which can miss real-world attack dynamics. - A DDoS attack floods a target with simultaneous requests until the system slows, crashes or becomes inaccessible to legitimate users. - Papers AG says Obsidio relies on the Acurast platform, which distributes computing power across tens of thousands of real-world devices. - The company says that setup reduces dependence on large centralized cloud providers and lowers systemic risk. - Obsidio processes data in secure hardware areas of mobile devices and uses zero-trust principles. - The platform is fully GDPR-compliant and uses explicit opt-in consent from participating users. - Obsidio provides cryptographically signed, tamper-proof logs that can serve as audit evidence. - The company positions the product as a Swiss-engineered resilience testing platform for critical infrastructure.

Between the lines: - The launch reflects a wider shift in cybersecurity toward proving resilience, not just claiming protection. - Swiss banking and infrastructure operators face stricter documentation expectations as European and Swiss rules converge on operational resilience. - Obsidio’s decentralized model is also a bet on digital sovereignty, with Switzerland as a selling point for regulatory clarity and data protection. - The product’s emphasis on realistic botnet simulation suggests traditional cloud-based testing may be too controlled to expose some weaknesses.

What’s next: - Papers AG is likely to position Obsidio as a compliance and resilience tool for more banks, insurers and infrastructure operators. - The company will need to show that the platform’s testing results hold up in audits and real operational reviews. - Broader adoption will depend on whether regulators and security teams accept decentralized smartphone-based simulation as credible evidence.

The bottom line: - Obsidio is designed to help critical organizations test DDoS resilience under realistic conditions while producing the records regulators increasingly expect.