Certificate pinning on a mobile app connection and how it is bypassed
Certificate Pinning: Why It Fails and What to Pair...

Certificate pinning is bypassed routinely, and not because the cryptography is weak. Why the check is the target, the two operational failures, and the four controls to pair it with.

Android App Protection: A Practical Guide Blog
Android App Protection: A Practical Guide

Android carries more threat activity for structural reasons. What makes the platform different, the six Android-specific attacks, why ProGuard is only layer one, and a practical priority order.

What Hackers See When They Decompile Your App and what's each industries secret
What Hackers See When They Decompile Your App

A decompiled app reveals your API surface, secrets, business logic and security checks. Here is exactly what is visible — and what mobile app hardening changes.

Recent Posts

Mobile Application Hardening: Build vs Buy Blog
Certificate pinning on a mobile app connection and how it is bypassed
Life at SecIron: Employee Highlight, Muhammad Iqbal