Security testing of iOS and Android apps and the APIs behind them, measured against OWASP MASVS and the Mobile Application Security Testing Guide.
Testing an iOS app against MASVS and the MASTG iOS tests: local data storage and Keychain use, network security, authentication, platform interaction and, where required, resilience against tampering; covers builds, test devices and accounts the client provides.
Testing an Android app against MASVS and the MASTG Android tests, including exported components, storage, network configuration and code protections, and how a test aligned to MASVS L1 relates to Google's MASA review for the Play Data safety section.
Testing the APIs a mobile app calls, which is where most serious mobile findings sit: object and function level authorization, token handling with OAuth and OIDC, and API abuse, measured against the OWASP API Security Top 10 2023 and ASVS V4.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.