Appdome

This Mobile Runtime Application Self Protection (RASP) solution guards Android and iOS applications constantly against the OWASP Top 10 Mobile Risks without needing source code changes. The RASP includes anti-debugging to stop code analysis, anti-emulator to limit running on virtual devices, and anti-tampering to block unauthorized changes. Integrity stays sound as anti-tampering checks the application file at runtime using thousands of checksum validations to verify a cryptographic hash.

Totaldata™ Encryption requires data to be encrypted while stored, placing this private material inside a separate, safe area. The encryption uses common industry types like AES 256 or FIPS 140-2 certified cryptography modules. Application teams control the encryption fully, which protects strings, resources, preferences, and secrets, using tools like XMLEncrypt™ for strings.xml values and Dex File Encryption for Java classes.

ThreatScope™ Mobile XDR is an Extended Detection and Response (XDR) system for Android and iOS that does not need a separate piece of software inside the application package. This system provides clear, constant information on mobile threats by watching the mobile business's active attack area. This real-time attack and threat information allows 100% automated defenses to be placed directly into the CI/CD pipeline, stopping attacks before they develop.

The multi-layered secure communication solution defends against Man-in-the-Middle (MitM) attacks by closely checking network connections for bad proxies and attempts to reuse session data. Security rules are strictly followed by checking TLS/SSL connections, which means enforcing a minimum TLS version and specific cipher suites. The feature also requires ‘Secure Certificate Pinning’ to prevent the app from connecting to unsafe servers and uses ‘Prohibit Stale Sessions’ to find and block the reuse of old Session IDs.

Operating system integrity performs immediate checks and containment of threats using powerful, automated Jailbreak and Root detection to find compromised iOS and Android devices. This protection also blocks common ways to hide a compromise, like Magisk and Liberty Lite. The capability keeps the application environment safe by finding if a device has turned on risky settings, specifically Developer Options or the installation of apps from Unknown Sources.