Security testing of Android and iOS applications together with the backend APIs they rely on. We assess both the application itself and the server-side controls protecting users and data.
Book a Free ConsultationKrypsys provides security testing of Android and iOS applications together with the backend APIs and services on which they rely.
A mobile application review should not stop with the software installed on the device. In many cases, the most important security controls are implemented by backend services, so our testing considers the mobile client and server-side components as part of the same security boundary.
Testing combines static and dynamic analysis with hands-on assessment of the application while it is running. This allows our consultants to examine how data is stored, how users are authenticated, how the application communicates with backend services and whether controls implemented within the client can be bypassed.
We also test the application outside its normal user interface, including direct interaction with supporting APIs where this forms part of the scope. This can identify situations where a control appears to exist within the application but is not enforced by the server.
Testing can also include attempts to understand or bypass protections such as certificate pinning, client-side validation and other controls intended to restrict inspection or modification of application behaviour.
The work is tailored to the application and the way it has been implemented rather than treating every mobile application as a standard checklist exercise.
Findings are manually verified and reported with the technical context needed to understand both the application-side issue and any associated backend risk.
Book a free consultation. We'll discuss your environment and recommend the right engagement for your risk profile and compliance requirements.