Do not send application files, passwords, or sign-in data from this page.
Assessment scope
Usual path
App and infrastructure togetherThe app plus the servers and accounts behind it. One report, and a clearer close before or after release.The phone appAn authorized review of the iOS or Android client: sign-in, transport, storage, and sensitive logic.
The API and its serverAn authorized review of the service the app talks to, limited to the agreed assets.
InfrastructureServers, cloud, accounts and permissions, and admin surfaces. We start from an asset list the owner signs.