Mobile application security analysis
App acquisition, static evidence, traffic observations on an eligible device, and reporting in one scan.
SCAN DASHBOARD
Analysis results
No scan selected yet.
Presentation view · Available results are shown. Pending and partial stages retain their status.
Scan tracking
- Stage / status
- —
- Elapsed time
- —
- Last status record
- —
Choose a file or link to get started.
Email report
Signed request and test eligibility
Eligibility does not mean a test ran. Executed checks are listed separately in the report.
SCAN RESULT
Security summary
Static candidates by source severity
What was done
YOUR CONTROL
Sign in and hand over
Complete the sign-in step on the analysis emulator. Automatic exploration waits until you click Let the agent continue; traffic capture remains active. This handoff does not verify server-side authentication.
PRIORITY
Key results
Final results include only confirmed findings with evidence references.
SUMMARY
Quick preliminary report
Summary of available results. Full findings, evidence and coverage gaps are in the details; completed stages can be downloaded separately.
OBSERVED SCREENS AND ACTIONSExploration map
Step history
AUTOMATIC NAVIGATIONNavigation steps
DEVICE AND TRAFFIC
Dynamic coverage summary
Reading limits and unverified coverage
Observed HTTP endpoints
OPTIONAL
Deep analysis
The preliminary report shows available evidence. Request the local model review separately; queued and running states are shown when recorded.
PROGRESS
Analysis stages
01 / STATIC
Static analysis
02 / DYNAMIC
Dynamic traffic observations
03 / AGENT
Agent analysis
SCAN REPORT
Final report
Priority subjects and recommendations are summarized. Candidates are not confirmed vulnerabilities; all records remain in the technical report.
Technical details and all observations
Static analysis
These observations come from the APK matching the signed scope; secret candidates and pinning calls are not confirmed vulnerabilities.
Device runtime observation
App-specific network activity
Packet counts do not verify HTTP endpoints or vulnerabilities. Raw traffic is not included in the presentation report.
Dynamic traffic observations
These flows were seen in an authorized device session; they do not alone constitute a security finding or completed agent analysis.