FREE ASSESSMENT

20 questions to assess your mobile app security posture

A self-assessment you can run against your own apps before you speak to any vendor, including us.

  • Twenty questions across code, runtime, data and response
  • Written to be answered by your own team, not a supplier
  • Identifies the gaps before they appear in an audit
  • Maps to the controls regulators increasingly expect
Self-assessmentSecurity and engineering teams
Read the assessment

13 pages, PDF. Opens in a new tab, no form required.

What it covers

Most mobile security gaps are known internally long before they are written down. This turns that knowledge into something you can act on.

Your code and what it reveals

Whether your app can be decompiled to expose API endpoints, hardcoded secrets, encryption keys and business logic.

The runtime environment

Whether your app knows it is running on a rooted device, inside an emulator, under a debugger, or alongside a hooking framework.

Data at rest and in transit

Where sensitive data is stored on the device, how it is encrypted, and whether certificate pinning is enforced.

Detection and response

Whether you would know a compromise had happened, how quickly, and what your app is able to do about it.

Talk to Us

Run the assessment first. If the answers raise questions, we will go through them with you against your own apps, and tell you where we do not fit.

Talk to an expert