Blog category

App protection

How mobile apps are attacked after release and how Otukan protects code, runtime, data and APIs on Android and iOS, from obfuscation to RASP and attestation.

  • App protectionGDPR privacy by design for mobile apps, whoever codes them

    What GDPR Article 25 means for a mobile app built in-house or by a supplier: who is responsible, which decisions it touches and what evidence to keep.

  • App protectionMobile ad fraud prevention

    How mobile ad fraud works, from click injection and SDK spoofing to device farms and reward farming, and where app signals help your backend decide.

  • App protectionApp attestation vs device attestation

    What app attestation and device attestation each prove, what neither tells you about the user, and how a backend should verify freshness and decide.

  • App protectionApp shielding vs RASP

    How app shielding and mobile RASP overlap and differ: definitions, a side-by-side comparison, when you need each and how Otukan combines the two.

  • App protectionData at rest encryption for mobile apps

    How to evaluate data at rest encryption for mobile apps on Android and iOS: inventory the data, own the key lifecycle and know where plaintext still appears.

  • App protectionProGuard vs mobile app shielding

    What ProGuard and R8 do for an Android build, what name shortening leaves exposed, and when an app needs hardening and runtime checks on top.