Mike Woodard
·AppSec VP of PM

Delivering high-quality, secure mobile applications

Delivering high-quality, secure mobile applications is increasingly important. And now it’s easier to accomplish!

The availability of millions of mobile apps means that your apps need to be compelling enough to get (good!) customer attention. Your enterprise—if it’s like most others—relies on your apps as the primary customer touchpoint. That’s why security breaches and poor user experiences are not an option.

That means that comprehensive testing and application security need to move to center stage to guarantee that optimal user experience. Unfortunately, up to this point, fully testing protected applications was hard or even impossible because the detection mechanisms in the protected app would detect the testing automation infrastructure and exit the app. And this is what should happen because automated testing instrumentation makes changes to apps that are the same as the tampering performed by threat actors.

But now, the new integration between our application security and continuous testing products allows you to speed up and expand your test coverage by eliminating many manual tests for protected apps and eliminate the false positive detections of the testing environment itself.

Instead of having protected apps detect the automated testing environment and crash, apps now go beyond the initial detection and further detect whether the app is running in our continuous testing environment. If that’s the case, then the app just continues to run allowing comprehensive testing of all parts of protected apps. If it is determined that the app is not in our testing environment, it performs its normal tamper action and typically crashes.

So instead of generating a fully tested, but unprotected version of an app AND a fully protected, buy manually, partially tested version of an app, you can just make that fully protected app that you want to ship and use our automated testing environment to do full functional, performance, and accessibility testing.

This reduces the number of tests you need, makes it easier to adhere to compliance requirements, and minimizes the chance of releasing an unprotected version of your app into the wild! One of the executives that I talked to recently highlighted process simplification as one of his top priorities to increase velocity and decrease confusion and errors.