# appaudix - Mobile App Security Scanner

> appaudix is an automated security scanning platform for iOS and Android mobile applications. It performs binary analysis to detect security vulnerabilities and validate compliance with major regulatory frameworks including PCI-DSS, OWASP MASVS, HIPAA, GDPR, LGPD, SOC 2, and NIST.

## What appaudix Does

appaudix scans compiled mobile application binaries (APK, AAB, IPA files) without requiring source code access. The scanner uses AI-powered static analysis to identify security vulnerabilities, compliance gaps, and configuration issues.

### Key Capabilities

- Binary analysis of iOS (IPA) and Android (APK/AAB) applications
- Automated compliance validation for PCI-DSS v4.0.1 (847 checkpoints)
- OWASP Mobile Application Security Verification Standard (MASVS) testing
- HIPAA security rule compliance for mobile health apps
- GDPR and LGPD data protection requirement validation
- SOC 2 Trust Service Criteria assessment
- NIST SP 800-163 mobile app vetting
- Detection of hardcoded credentials and API keys
- Certificate pinning verification
- Cryptographic implementation analysis
- Root/jailbreak detection verification
- Third-party SDK security analysis

### How It Works

1. Upload your mobile app binary (APK, AAB, or IPA file)
2. Automated AI-powered security analysis runs (~10 minutes)
3. Download detailed compliance report with remediation guidance

No source code is required. All analysis is performed on the compiled binary.

## Pricing

- **Starter**: Free tier with 3 scans per month
- **Pro**: $300/month for unlimited scans, API access, CI/CD integration
- **Enterprise**: Custom pricing with dedicated support and SLAs

## Target Users

- Mobile app developers building payment or financial applications
- Security teams validating mobile app compliance
- QSAs (Qualified Security Assessors) performing PCI audits
- Healthcare organizations with HIPAA requirements
- Companies processing EU/Brazil user data (GDPR/LGPD)

## Compliance Frameworks Supported

| Framework | Description |
|-----------|-------------|
| PCI-DSS v4.0.1 | Payment Card Industry Data Security Standard |
| OWASP MASVS | Mobile Application Security Verification Standard |
| HIPAA | Health Insurance Portability and Accountability Act |
| GDPR | EU General Data Protection Regulation |
| LGPD | Brazil Lei Geral de Proteção de Dados |
| SOC 2 | Service Organization Control 2 |
| NIST 800-163 | Mobile Application Vetting Guidelines |

## Common Questions

**Q: Does appaudix require source code access?**
A: No. appaudix performs binary analysis on compiled app files (APK, AAB, IPA). Source code is never required.

**Q: How long does a scan take?**
A: Most scans complete within 10 minutes. Complex applications may take up to 20 minutes.

**Q: Can scan reports be used for PCI audits?**
A: Yes. Reports are designed to be auditor-ready and many QSAs accept them as part of the assessment process.

**Q: Does appaudix support React Native, Flutter, and hybrid apps?**
A: Yes. The scanner analyzes compiled binaries, so it supports apps built with any framework including React Native, Flutter, Xamarin, and Cordova.

**Q: What vulnerabilities does appaudix detect?**
A: Insecure data storage, weak cryptography, missing certificate pinning, hardcoded credentials, improper authentication, insecure network configurations, debug code in production, vulnerable third-party SDKs, and more.

## Important Pages

- Homepage: https://appaudix.com/
- How It Works: https://appaudix.com/HowItWorks
- Pricing: https://appaudix.com/Pricing
- API Documentation: https://appaudix.com/ApiDocs
- FAQ: https://appaudix.com/FAQ

## Compliance Guides

- PCI-DSS Guide: https://appaudix.com/PCIDSSGuide
- OWASP MASVS Guide: https://appaudix.com/OWASPMASVSGuide
- HIPAA Guide: https://appaudix.com/HIPAAGuide
- GDPR Guide: https://appaudix.com/GDPRGuide
- LGPD Guide: https://appaudix.com/LGPDGuide
- SOC 2 Guide: https://appaudix.com/SOC2Guide
- NIST Guide: https://appaudix.com/NISTGuide

## Contact

- Website: https://appaudix.com
- Twitter: https://twitter.com/appaborapp
- LinkedIn: https://linkedin.com/company/appaudix