Approov Mobile
App Attestation


App and Device Integrity Measurement

Traditional app security approaches integrate all of the threat detection logic into the app itself, which is running in an attacker controlled environment. Even if the detection code is well defended, it relies on the app making a local decision about it’s own integrity, which presents an obvious weak point that is frequently exploited by attackers.

Approov is different. It uses a remote attestation approach, where the running app must prove itself to be genuine through a sequence of integrity measurements. These results are then sent to the Approov cloud service using a patented challenge-response protocol, immune from replay attacks. The Approov cloud makes the decisions.

If integrity is verified then the running app is issued with a short lived cryptographic token that it can use to prove its authenticity to the backend API services it uses. The app cannot make its own decisions about integrity and cannot sign its own tokens. Defense is moved out of the attacker’s reach and into the Approov cloud.

Approov mobile security architecture diagram

Google Play Integrity and iOS App Attest Integrated

Approov provides more granular control, wider device support, cross-platform consistency and various other advantages over the basic platform capabilities. However, Approov does optionally integrate with iOS App Attest / DeviceCheck and/or Google Play Integrity / SafetyNet to provide the most comprehensive attestation and powerful threat management framework.

Approov app attestation diagram; integration with Google Play Integrity and iOS App Attest

Talk to a Security Expert

Give us 30 minutes and our security experts will show you how how to protect your revenue and business data by deploying Approov to secure your mobile apps and your APIs

Get a Trial

Ready to get serious? For detailed pricing information, tell us the name of your app and the expected number of active monthly users on Android and iOS.

Close up of man using a smartphone

Looking for a quick fix?

Our Quickstarts will show you the fastest path to implementing better
mobile security.