Does CloudCard perform dynamic security testing of their application(s) once they're online, using an automated assessment tool that supports standard vulnerability profiles (like OWASP top 10)?

Not at this time. This is currently on our project roadmap for the next 12 months.