I will test your mobile app for ios and android security issues

Your mobile app handles logins, tokens and personal data, and a single insecure storage or transport flaw can expose all of it. This assessment tests your Android or iOS app against OWASP MASVS and the OWASP Mobile Top 10.

Testing covers:

• Insecure data storage: preferences, Keychain, keystore, databases and logs
• Network communication: TLS, certificate pinning and cleartext traffic
• Authentication and session handling, including biometric flows
• Hardcoded secrets, API keys and endpoints
• Root and jailbreak detection, tamper protection
• Platform issues: exported components, deep links and WebViews
• API traffic analysis with Burp Suite or mitmproxy

I test on real devices where possible, not only emulators. You receive a report with reproducible steps, screenshots, CVSS 3.1 ratings, MASVS mapping and developer remediation guidance.

Basic: one platform, static and dynamic review.Standard: both platforms plus API traffic analysis.Premium: both platforms, reverse engineering, tamper checks and one retest.

Please provide the app file (APK or IPA) or store link and a test account. I do not test apps you do not own or have written permission to test.