Section two

The phone app

An authorized review of the iOS or Android client: sign-in, transport, storage, and sensitive logic.

When it is requested

An owner who wants an authorized review of the phone app before release, or after an incident they need to understand.

What the assessment covers

  1. 01Work starts only after a written scope and an ownership or authorization attestation.
  2. 02The review covers sign-in, transport, storage, and sensitive logic in the agreed app.
  3. 03The report is confidential: an executive summary, severity, and remediation guidance your team can act on.
  4. 04Retest covers what was closed, inside the agreed window. Operational detail is not published here.