Mobile App Vetting

Every App. Every Release. Always Watched.

OpenScan Intelligence pulls any app from the Apple App Store or Google Play on demand and keeps tracking the ones on your watchlist. The moment a new version breaks your security, privacy or geography policy, you know.

Start Vetting an App See What We Check

Example app vetting floor: apps from the Apple App Store and Google Play are checked release by release, with cards showing new versions being scanned, releases that meet or violate your policy, and apps on your watchlist.

App Posture

See What Every App Really Does

OpenScan Intelligence tests iOS and Android binaries pulled straight from the stores and reports each app's posture. You can see it without involving the vendor.

  • Data Collection and Privacy What personal data the app collects, and the device permissions it requests, from location and contacts to camera and microphone.
  • Traffic Geography The countries the app routes traffic through, checked against the list your business approves.
  • SDKs and Open Source Embedded third-party SDKs and open source libraries, with outdated or risky versions flagged.
  • Encryption Whether the app uses end-to-end encryption, sends data in cleartext or stores it unencrypted on the device.
  • Obfuscation and Hardening Whether the app is obfuscated and how well it is hardened against reverse engineering and tampering.
  • Security Assessment Raw vulnerability findings, released only with the vendor's approval. How Approval Works
Watchlist and Policy

Set the Bar Once. Every Release Gets Checked.

Put the apps your business depends on on a watchlist, set the rules they must meet, and get alerted with the exact rule a new version breaks.

  1. Track the Apps You Rely On Vendor, partner and employee-facing apps from the App Store and Google Play.
  2. Set Your Rules Encryption, obfuscation, approved countries, data handling and more.
  3. Get Alerted When Policy Breaks No waiting for the next annual review to find out an app changed.

Example vendor app policy where releases 4.0 and 4.1 of a watched app stay in policy and release 4.2 triggers an alert because its traffic now routes through a country outside the approved list.

Vendor Collaboration

Request the Audit. We Deliver the Assessment.

Posture is open to anyone. The security assessment takes the vendor's approval, and Data Theorem handles the request for you.

Animation: you request the audit report on a vendor app, the vendor app team approves the release, and Data Theorem delivers its security assessment to you.

  1. You request Ask for the audit report on any vendor mobile app you rely on.
  2. The vendor approves Nothing is released until the vendor app team authorizes it.
  3. Data Theorem delivers Its independent security assessment of the app's latest release.
Built on Mobile Secure

The Engine That Tests Your Apps, Pointed at Everyone Else's

OpenScan Intelligence runs on the same analysis engine Data Theorem customers use to test their own iOS and Android apps in Mobile Secure, aimed at the public app stores.

Get Started

Know Every App You Depend On

Tell us which apps matter to your business. We will show you their posture today and keep watching from there.

Start Vetting an App