Skip to content
RootCut
Portal
All services

Mobile application

Android and iOS apps, plus their API

We test your Android and iOS apps the way an attacker with the app on their own phone would: data stored on the device, traffic to your servers, authentication and the API behind the app.

How we test

The mobile application penetration test assessed the Android and/or iOS apps listed under Scope & dates, and, where agreed, the API behind them. Testing covered data stored on the device, network traffic, authentication and session handling, and the app's use of platform security features.

The approach follows the OWASP Mobile Application Security Testing Guide (MASTG) and the MASVS. Testing was mainly manual and every reported finding was verified by hand.