NowSecure Marketing
Whether you’re building a mobile app from scratch or evaluating an existing app, developers will find debugging an essential skill to master. Debugging is the process of identifying and resolving errors in software systems and mobile apps. Most Integrated Development Environments (IDE) come with built-in debugging tools that enable a developer to review the inner […]
Does anyone need DAST? That’s the question recently posed by founder, podcaster, threat modeling expert and security industry luminary Chris Romeo that sparked online debate and spawned a NowSecure DevSecOps Bunch webinar, “The Great Debate: Does DAST Work for DevSecOps?” Misconceptions about DAST abound. In reality, organizations need a range of security tools and techniques […]
Many organizations have embraced mobile DevSecOps by integrating automated mobile application security throughout the software development lifecycle. Baking security into the development process reduces risk, cuts costs and accelerates delivery of secure, high-quality mobile apps. A policy-based approach enables stakeholders to define and operationalize policy rules to meet internal, industry, app store and other requirements […]
Enterprise security providers need to walk the walk. NowSecure has completed our latest annual SOC 2 Type 2 security audit covering the NowSecure Platform for automated mobile app security testing. And NowSecure remains the only enterprise-grade mobile application security testing (MAST) provider with a SOC 2 certified cloud platform. The audit report for the period […]
“Photo by FLO:D on Unpslash https://unsplash.com/photos/yQYQJaiypZE“ Technology advancements are constantly reshaping the way we communicate and conduct business. As the CTO of NowSecure, a mobile application security testing SaaS provider, I want to discuss a topic I believe is of timely relevance: post-quantum security and in particular within the mobile application context. The cryptographic landscape is […]
TLDR Android apps using HTTPS/TLS over the network can be decrypted using a specially crafted shim library that hooks the SSL Context to enable keylogging. Such implementation requires using the LD_PRELOAD technique and modifying the Android bootup scripts to load this library during the Zygote startup process. Background Pen testers and security analysts often […]