Best Practices
Although Mobile Threat Defense (MTD) has captured attention from regulated industries and government, it doesn’t provide the price/performance value to justify investment. Here’s why mobile app vetting offers a stronger, cost-effective approach to managing mobile risk.
Because NowSecure was founded as a mobile application forensics company a decade ago, penetration testing is built into our DNA. We’ve tested thousands of Android and iOS apps on behalf of our customers, uncovered some scary vulnerabilities and helped customers improve the security of their mobile apps. The following is the third installment of an […]
Mobile app developers often use deep links to improve the user experience and engagement by helping users navigate from the web to their app. However, our security testing has found an easily exploitable vulnerability when deep links are used incorrectly for authorization purposes. This blog will explain how this vulnerability can be exploited and how to safeguard your app by using the more secure version of deep links, App Links.
While mobile app security testing is fairly new, we still see a considerable share of BS from vendors. Inspired by a similar DoD document for Agile, we created our own list of crucial capabilities and key questions to ask prospective tool vendors.
As DevSecOps teams incorporate mobile application security testing into the build pipeline, they need the process to be painless. Follow these smart strategies for selecting and implementing an automated testing tool that keeps pace with the mobile app release cycle and helps ensure security, compliance and privacy.
Popular low or no-code mobile application development platforms empower new ranks of citizen developers. However, the tools can also shortchange application security and must be properly tested before the apps are rolled out. Learn some best practices for safely incorporating these app dev platforms into your organization.
Keeping pace with ever-increasing mobile security threats is a team sport that requires the support and performance of many key players. Here at NowSecure, our security research team spends countless hours helping our customers find and fix vulnerabilities to secure their mobile apps. The research group at NowSecure holds multiple responsibilities. Part of its mission […]
Many organizations struggle with mobile appsec testing due to a lack of resources, technology challenges, insufficient skills and a lack of understanding about the costs and economics of various testing options. At the same time, they face ever-increasing levels of risk, particularly in industries commonly targeted by hackers. What they don’t realize is organizations can deploy automated tools that deliver continuous security testing every day for less than half the cost of an outsourced pen test.
Follow these five tips for contending with the cybersecurity skills shortage by broadening your organization’s approach to filling jobs.
To help security analysts and developers craft a more effective list of mobile testing requirements, we’ve assembled a Mobile App Security Testing Checklist of three key questions to address