menu
close_24px
✖
Frame 427318984

Hello, how can we help you?

Navigate Your Mobile App Security : Your Questions, Our Answers

    Frame 427318985
    How does Appknox protect its platform and infrastructure against potential cyber threats?

    Appknox is ISO-certified and compliant with all security measures and data policies. We also perform internal security assessments for each release and external regular evaluations.

    How does Appknox ensure the confidentiality and security of sensitive data provided during the testing process?

    Appknox's commitment to data security is reflected in its SOC2 and ISO 27001:2013 certifications. As an ISO-certified entity, Appknox follows all necessary security protocols and data policies. We conduct regular internal security assessments with each release and undergo external evaluations to ensure the utmost security for our client's data.

    How does Appknox ensure transparency and effective communication throughout the testing engagement?

    Appknox achieves transparency and communication through regular updates, detailed reports, and interactive communication channels. We provide clients with progress reports, vulnerability details, and the necessary information to understand and address security issues.

    How does Appknox keep its customers informed about the latest security updates and platform enhancements?

    Appknox communicates updates through email notifications, blog posts, newsletters, and webinars. We also have a dedicated section on our platform or website where clients can access release notes and updates.

    What measures are implemented to protect the intellectual property of the mobile apps being tested?

    We avoid disruptive changes to the application to protect its intellectual property. If such actions become necessary due to compliance requirements, we'll inform all relevant stakeholders to ensure proper preparations are made.

    How does Appknox maintain its own compliance (ISO 27001, SOC 2) and protect customer data?

    Appknox is ISO 27001 certified and operates under SOC 2 Type II–equivalent controls. Customer data is encrypted using AES-256, stored in Tier IV data centers, and never shared externally. 

    Regular audits ensure ongoing compliance with the highest security standards.

    Are security researchers or third parties subject to strict data handling agreements when working with Appknox?

    We have an in-house team of experienced security researchers and do not engage with third-party vendors. In the rare event that such collaboration is necessary, we implement a rigorous vendor onboarding process.

    What are Appknox's compliance certifications and standards?

    Appknox stands out for its compliance certifications and commitment to industry standards.

    Appknox is ISO 27001 and SOC 2 Type II certified and fully adheres to GDPR, PCI DSS, HIPAA, NIST, and CWE principles. Our infrastructure and policies are regularly audited to ensure compliance with global data protection and privacy standards.

    Compliance isn’t optional for us; it’s built into our DNA.

    Explore: Compliance at Appknox.

    How does Appknox support privacy compliance (GDPR, PCI-DSS, HIPAA, etc.)?

    Appknox’s Privacy Shield feature maps your app’s data flows against privacy frameworks, including GDPR, HIPAA, and PCI DSS.

    It flags over-collection, insecure transmission, or storage of sensitive data, before auditors do.

    Explore: Appknox Privacy Shield

    How does Appknox align with mobile-specific standards like OWASP MASVS and OWASP API Top 10?

    Appknox’s testing framework fully aligns with the OWASP MASVS and OWASP API Top 10 standards. It automatically tests your apps for weaknesses such as insecure communication, improper authentication, and data leakage, ensuring compliance with mobile-specific best practices.

    Get MASVS compliance, built right into every scan.

    Can we host scan results on-premise?

    Yes, Appknox supports on-premise and private-cloud deployments for enterprises with stringent data policies.

    More info: Appknox Deployment Models

    Can Appknox support on-prem or private cloud deployments for data residency and compliance?

    Yes, Appknox supports on-premise and private cloud deployments for customers requiring local data residency. On-prem options include isolated installs, local logging, and offline patching workflows; we offer full on-premise deployment support aligned with enterprise workflows to assist with rollout.

    More info: When control matters most: Deploying Appknox on-premise with precision and confidence