Protect your web based app with DexProtector.
DexProtector’s interconnected layers of protection secure web based applications just as easily as native apps.
Why web based app security is so important.
Web based hybrid applications are growing in popularity. Not least because they’re breaking down barriers to entry to the development world. But using WebView in mobile apps invites a whole host of new cyber threats. Web based apps can be particularly vulnerable to reverse engineering attempts, man in the middle attacks, and supply chain attacks. Fortunately, DexProtector prevents these threats just as effectively for web-based apps as it does for native applications.
Solutions for web based app security vulnerabilities.
Reverse engineering
Web based hybrid apps use a bundle format that brings the application logic together in the form of JavaScript code. This is quite easy for an attacker to read, understand, and, if they choose to do so, modify. This, together with the fact that web based apps don't come with obfuscation pre-applied means there’s a high risk of them being reverse engineered.
DexProtector’s code hardening techniques like encryption and obfuscation are applicable to web-based hybrid apps and are vital in stopping decompiling and modifying. The same is true of the RASP checks DexProtector employs to detect jailbroken devices, emulators, and hooking frameworks like Frida. These can all be used at runtime to carry out a dynamic analysis, but if DexProtector detects one of them in your app’s environment, it won’t allow the app to start.
Man-in-the-middle attacks
Network interception is a big risk for web based apps as they use WebView which doesn’t help with certificate validation. The expectation is that certificate validation be done manually, but it’s not an easy task to undertake.
DexProtector uses a combination of SSL Pinning and Certificate Transparency to make sure requests sent from your app only arrive at your pre-determined, genuine server. In this way it helps to stop man in the middle attacks.
Supply chain attacks
Web based hybrid apps use NPM packages as their dependencies. They are very easy to publish, however, which means there’s a risk that bad actors could publish malicious packages there. These seemingly harmless libraries could then get picked up to speed up the development process.
With AppCare (a feature within DexProtector Studio) you can scan your application for existing, known vulnerabilities in libraries and dependencies. It’s a great way to make sure that there’s no malicious code within your app that could lead to vulnerabilities further down the line.
DexProtector is the perfect partner for web based hybrid apps.
DexProtector secures web based hybrid apps from attacks just as easily as it defends native applications. Every single aspect of the DexProtection process also applies to your web based app.
Save time with instant integration
Seamlessly integrate DexProtector into your development lifecycle. Whether you use DexProtector Studio, integrate into the CI/CD process via the Gradle plugin or the command line, it’s as easy as “unprotected app in, protected app out.”
Protect on premises and avoid online risks
Bypass unnecessary risks associated with cloud-based security solutions. DexProtector operates offline in a safe environment that you control.
Secure your app without slowing it down
DexProtector’s multi-layered protection doesn’t compromise performance. Your app retains its speed and responsiveness, giving you robust security without a lag.
Find out why DexProtector is already trusted to protect web based apps.
A guide to mobile application protection
Attacks against mobile apps are getting more dangerous. To defend against them you need to know how and why attackers target them and what you can do to stop them succeeding.
read guide