AI Runtime Protection

The First Line of Defense in the AI Era

Attackers use AI to take apps apart and probe APIs at machine speed. AI Active Protection stops them inside your mobile apps and in front of your APIs, while the fix ships.

Get Started Explore Mobile Protect Explore API Secure
Runtime, last 7 days Mobile Protect API Secure
18,240 Threats detected 98.2% Blocked at runtime
Why Runtime, Why Now

AI Shrinks the Time to Exploit. Fixes Still Take Time.

Fixes still move through tickets, reviews and releases. A mobile fix is not live until it clears app store review and your users update. Here is what that window looks like.

Fix live The fix is finally live everywhere.
Without active protection Exposed for 30 days 3 security events got through
November
Sun
Mon
Tue
Wed
Thu
Fri
Sat
1 Exploit found
2
3 Ticket filed
4
5
6
7
8 Fix written
9
10
11
12 Code review
13
14
15
16 Release
17
18
19 App store review
20
21
22
23 Users update
24
25
26
27
28
29
30 Fix live
With AI Active Protection Protected for 30 days 3 security events blocked
November
Sun
Mon
Tue
Wed
Thu
Fri
Sat
1 Exploit found
2
3 Ticket filed
4
5
6
7
8 Fix written
9
10
11
12 Code review
13
14
15
16 Release
17
18
19 App store review
20
21
22
23 Users update
24
25
26
27
28
29
30 Fix live
Where AI-Assisted Attacks Stop

Five Attacks AI Makes Faster. Stopped Where They Land.

AI gives attackers speed, not new rules. They still have to run against your app on a device and send requests to your APIs. That is where AI Active Protection is waiting.

Mobile Protect In the app

AI Reads Your Code. Then the Code Changes.

The AI-assisted attack

An AI decompiler maps your app's logic, keys and API routes far faster than a person could.

What stops it

Mobile Protect blocks the decompile attempt in the app, and dynamic obfuscation changes the code every session.

Runtime events Example Bank 4.13, iOS Live
AI-assisted decompile started AI-assisted
Reverse engineering detected Detected
Blocked in the app What the AI mapped is already out of date.
Delivered By

Two Products. One Line of Defense.

Mobile Protect defends the app on the device. API Secure defends the APIs behind it.

In the app Mobile Protect

One SDK inside your iOS and Android apps that stops attacks on the device.

  • Dynamic obfuscation that changes every session
  • Anti-tampering, anti-hooking and device integrity
  • Third-party code firewall and SSL pinning
  • On-device fraud scoring
Explore Mobile Protect
At the API API Secure

Runtime protection for the APIs behind your apps, enforced by the WAF you already run.

  • Every API call analyzed at runtime
  • Attacks, abuse and AI-driven threats detected
  • Your existing WAF told what to block
  • Alerts when a protected API stops being protected
Explore API Secure
Also on the platform Mobile Secure Code SAST Secure Mobile Protect for Gaming
Open Source

SSL Pinning, Built on TrustKit

Mobile Protect includes SSL pinning built on TrustKit, the open source pinning library Data Theorem created and released at Black Hat USA 2015. It pins your app's connections to your servers' keys and stops man-in-the-middle attempts on the network.

MIT licensediOS and Android
TrustKit for iOS github.com/datatheorem/TrustKit TrustKit for Android github.com/datatheorem/TrustKit-Android

Research and Resources

Get Started

Put Your Defense Where Attacks Land

See what AI Active Protection would stop on your own apps and APIs.

Get Started