Manual security assessments for iOS and Android applications, carried out by specialists with a background in reverse engineering and bug bounty research.
Security assessment of iOS and Android apps, covering how they store data, communicate and handle authentication.
Request this assessmentTesting of the backend services your apps rely on, with a focus on authorization and business logic issues.
Request this assessmentAn assessment of how well your app's client-side protections hold up against reverse engineering and tampering.
Request this assessmentMoney movement and identity are the critical paths. We test whether they can be bypassed or manipulated from the app.
Ride-hailing, car sharing, ticketing and connected vehicle apps, where the app often controls something in the physical world.
Checkout, promotions and customer accounts are where abuse turns directly into financial loss.
Health data is among the most sensitive data an app can hold. We check where it goes and who can reach it.
We agree on targets, test accounts, timeline and rules of engagement.
Hands-on testing of the app and its APIs, supported by tooling where it helps.
Risk ratings, reproduction steps and remediation guidance for each issue.
Once fixes are in place, we verify them and update the report.
PRBX Security is an independent security practice focused on mobile applications and APIs. The work is grounded in hands-on research: most of our findings to date have come from mobile apps.
The person you talk to during scoping is the person doing the testing.
Automated scanners are a starting point. Most impactful issues are found by hand.
Being able to look inside the app binary means less is left untested.
Findings are written to be understood and fixed, not just listed.
No. We test the compiled app the same way an attacker would. Access to source code can make testing faster and deeper, but it is optional.
It depends on the size of the app and its API. We agree on a timeline during scoping, before any work starts.
We prefer a staging environment and dedicated test accounts. If production is in scope, limits and timing are agreed in advance.
Yes. We can sign your NDA before scoping, so you can share details about the app freely.
Tell us a little about your app. We'll get back to you to discuss scope and timing.
PRBX