Overview
What is a mobile application security assessment?
A mobile application security assessment checks an app, and the servers it talks to, for weaknesses that could expose users’ data or accounts. Ants Creation (Pvt) Ltd’s own security team assesses Android apps, under a written authorisation and an NDA. We do not test iOS apps.
We look at what the app stores on the phone, how it communicates with its servers, how users sign in, and what someone could learn by taking the app apart.
You receive a report with each finding rated by severity and the steps to fix it, and one re-test after the fixes.
What is included
What do we check in an Android app?
How it works
How does an Android app security assessment work?
01
Scope and authorise
The systems in scope and the testing window are set out in a written authorisation you sign, alongside an NDA.
02
Map
We map the target and how it is used, so testing covers what matters.
03
Test
We look for weaknesses and confirm, safely, which ones are real.
04
Report
Each finding is rated by severity, with the evidence and the steps to fix it.
05
Re-test
After you fix the issues, one re-test of the fixed issues is included.
Why Ants Creation
Why assess your Android app with Ants Creation?
Since 2011, Ants Creation has completed 700+ projects for 400+ clients in Sri Lanka and abroad.
Common questions
Android app security assessment: frequently asked questions
Do you test iOS apps?
No. Ants Creation’s security team assesses Android apps only; iOS app testing is not offered. For an Android app we check data stored on the device, how it communicates with its servers, sign-in and sessions, what can be learned by unpacking it, and the permissions it asks for. The APIs behind your Android app can also be tested in an API security assessment.
Do you need the source code?
Not always. Ants Creation’s security team can assess the installable Android app as it is published; access to the source code lets us look deeper, for example at how data and keys are handled. What you provide is agreed when we scope the work, and it is covered by the NDA signed before testing starts.
Can you test an app you did not build?
Yes. Ants Creation’s security team assesses Android apps built by other developers as well as our own, with the app owner’s written authorisation and an NDA signed before testing starts. You receive a report with each finding rated by severity and the steps to fix it, which your developers can act on, and one re-test of the fixed issues is included.
Do you also build Android apps?
Yes. Ants Creation builds Android apps, mostly in Flutter, through its Android app development service, so our developers can fix what an assessment finds if you want them to. Apps we build can also be assessed by our own security team before release. We do not build or test iOS apps at present.
Related services
Tell us what you need.
Tell us what you need, and we will recommend the right next step. No obligation, no sales script.