Mobile Protect

Stop Attacks Where They Happen. On the Device.

Mobile app protection and RASP (runtime application self-protection) for iOS and Android apps on devices you do not control, built for attackers who now arrive with AI tooling and for the AI running inside your app.

Get Started Read the Data Sheet
500 KB
SDK footprint on Android, 500 KB to 1 MB on iOS
0 ms
Added startup time on Android, with no compile-time impact on iOS
2–4 hrs
Typical SDK integration time
One SDK for Apps Built On iOS Android React Native Flutter .NET MAUI Capacitor Unity
The Runtime Gap

Your Backend Cannot See What the App Sees

Once your app ships, it runs on devices you do not control. Rooted phones, emulators, hooking frameworks and spoofed GPS all look like ordinary traffic by the time a request reaches your servers.

Attackers repackage binaries, hook the running process and automate logins, and AI tooling now helps them move faster. Mobile Protect runs inside every iOS and Android app, so it sees the device, the code and the session as they happen, and knows which user is signed in when the signals add up.

Core Capabilities

Protection That Ships Inside Your App

Mobile Protect is a mobile RASP SDK. It hardens the app with dynamic obfuscation and anti-tampering and detects jailbroken and rooted devices at runtime. One SDK, embedded in the app and working on every device it runs on. Pick a capability and watch it run.

The app checks the device it runs on, and a rooted device is surfaced before it reaches sign-in.

In Transit

SSL Pinning, Built on TrustKit

Mobile Protect includes SSL pinning built on TrustKit, the widely used open source pinning library Data Theorem created and released at Black Hat USA 2015. Pin your app's connections to your servers' public keys, catch man-in-the-middle and eavesdropping attempts, and see exactly how often they are blocked.

Open source since 2015 2.1k+ GitHub stars MIT licensed
TrustKit for iOS github.com/datatheorem/TrustKit (opens in a new tab) TrustKit for Android github.com/datatheorem/TrustKit-Android (opens in a new tab)
Pinned connections, live Pinned traffic Man-in-the-middle attempt
1,284 Blocked this week
How It Works

Embedded Once. Working on Every Device.

Mobile Protect ships inside your app as one SDK, does its work where the app runs, and reports what it sees back to your team.

Embed
Add One SDK

Drop Mobile Protect into your iOS and Android builds. One integration covers native and cross-platform apps.

Build · Example Bank 4.13
Add Mobile Protect SDK
Compile iOS and Android
Sign and release
500 KB on Android0 ms added startup on Android
Detect
Watch Every Session at Runtime

On each device, Mobile Protect checks integrity, guards the code and scores the session as it happens.

On the deviceLive
Device integrityChecked
Code protectionActive
Session riskScored live
Respond
Alert Your Teams and SIEM

Attacks on the app are blocked in place. Alerts and fraud signals go to your teams and to your SIEM.

Alerts
Debugger attachedBlocked
Fraud risk 9.1 / 10Flagged
Sent toYour SIEM
Anti-Fraud

Every Session Scored. Every User Known.

Mobile Protect scores each session inside the app and ties it to the user who is signed in. When the signals add up, a rooted device, a cloned app, an IP address that jumps continents every 30 seconds, input no person could produce, that user is flagged as likely fraudulent.

Read the Anti-Fraud Brief
Session 7F2AStarted Oct 2, 2026 · 09:41:02Live
JRSigned-In UserUser ID 48213j.rivera@example.com · customer since 2023
Fraud Risk ScoreThis session, this user9.1/ 10
LowMediumHigh
Session Timeline
09:41:02Signed inj.rivera@example.com · password
09:41:03Device is rootedRoot access detected on the device
09:41:03Cloned app binarySignature does not match Example Bank
09:42:00Impossible travelIP moved across 3 countries in 60 seconds
09:42:14Automated inputTaps repeat at identical 400 ms intervals
Likely Fraudulent UserUser 48213 flagged to your fraud team at 09:42:14
Fraud Farms

Many Devices. One Operator. Flagged as a Farm.

Fraud farms pack racks of devices into one location and drive them with bots to sign up, trigger app actions and manipulate the app at scale. Mobile Protect correlates sessions across devices, so the cluster is flagged as a farm instead of slipping through as many separate users.

Fraud Farm Found 47 devices · one location · sessions flagged Fraud farm
Rooted devices Cloned app binary Battery at 100% for 30+ days One location Scripted input
Fraud Farm Found 31 devices · one location · sessions flagged Fraud farm
Emulators Device clones One location Scripted input
Fraud Farm Found 62 devices · one location · sessions flagged Fraud farm
Battery at 100% for 30+ days Hardware spoofers Cloned app binary One location
Pairs With Mobile Secure

Tested Before Release. Protected in Production.

Mobile Secure tests every build before release and keeps checking the version that is live in the app stores. Mobile Protect defends that same app on your users' devices, where attackers actually run it.

Explore Mobile Secure
Mobile SecureTests every build, then monitors the store release
Mobile ProtectDefends the app on users' devices
Code
Build
Test
App Store
User Device
Found and fixed before release
Hardcoded API keyFixed
Insecure data storageFixed
Weak TLS configurationFixed
Defended on every device
DebuggerBlocked
Repackaged buildBlocked
Fraud risk 9.1Flagged
Overlap at the app store. Mobile Secure keeps checking the live store release while Mobile Protect takes over on devices.

Fair play is essential to retaining our players' trust. Data Theorem Mobile Protect helped us identify cheating attempts, block application tampering, and prevent unauthorized access to premium content through in-app purchase bypass. It has become a key component of our mobile security strategy.

2K Games, Inc. Logo

2K Games, Inc.

Platform Security , 2K Games, Inc.

Read the Story Mobile Protect for Gaming
Where Mobile Protect Fits

Defense in the App. Security Behind It.

Behind the App API Secure

Your app is only as secure as the APIs it calls. Mobile Protect defends the app on the device, and API Secure discovers, tests and protects the APIs behind it.

Explore API Secure
Solution Mobile Protect for Gaming

Specialized defense for the gaming industry. Protect your revenue, ensure fair play, and stop mods and cheats in high-performance environments.

Explore Gaming

Research and Resources

Mobile Protect

Get Started with Mobile Protect

Embed One SDK for your iOS and Android apps
Detect Tampering, hostile devices and fraud at runtime
Respond Block in the app and stream telemetry to your team
See It in Your Own App

Tell us where to reach you and a Data Theorem expert will walk you through Mobile Protect on your apps.