Consumer Mobile App · client anonymised
Android & iOS Security Assessment for a 500K+ download wallet app
Client profile
- Consumer wallet / rewards mobile app
- 500K+ downloads, fintech-adjacent
- Pre-release security gate
Engagement scope
- Static + dynamic testing of Android and iOS builds
- OWASP MASVS-aligned methodology
- API backend correlation testing
- 3-week engagement
Notable themes
Insecure local data storage, hardcoded API keys, weak certificate-pinning implementation.
Business outcome
Fixes validated pre-release and the app-store submission unblocked. A MASVS-aligned checklist was adopted for all future release cycles.
Find your broken locks before someone else does.
Tell us what you need tested. We reply within one business day.