Get started with AppBreach

1. Prepare your scan

AppBreach is in early access and currently focuses on Android. Request access to discuss your app and the testing you need. iOS support is in development.

Before starting, have your tenant API key, app ID, authorization reference and signed scope ready. The signed scope is supplied by a trusted issuer and defines the app and testing permitted. Only scan apps and systems you are authorized to test.

2. Submit your app

In the workspace, choose the platform, artifact type and scan profile that match your signed scope. For Android, provide an APK, AAB or supported Google Play link. Add your access details under Access and options, then start the scan.

Available tests depend on the approved scope and runtime. A store link alone does not grant permission to test an app.

3. Follow the stages

The workspace shows the status of each stage and any dependencies that need attention. Save the run ID to return to the scan later; you will need your tenant API key to access it.

A waiting or unavailable stage is a coverage gap, not a completed test. Review the final report for the checks that actually ran.

4. Review the report

Open the concise report in your browser or download the available reports, including PDF and technical records. Review the evidence, recommended actions and coverage alongside each observation. A candidate or signal is not necessarily a confirmed vulnerability.

When report email is available, you can enter an email address while starting the scan. Verify the address using the code sent to you; the completed PDF is sent after verification when the report is ready.

Learn more about the methods

Our mobile security testing guide explains static analysis, runtime testing, agent-assisted investigation and how to interpret coverage.