Mobile Security
Promon Shield for Mobile
Post-compile RASP and app shielding for Android and iOS against tampering and reverse-engineering.
Promon Shield for Mobile Overview
What it does
Promon Shield for Mobile is a Runtime Application Self-Protection (RASP) and app shielding product that defends Android and iOS applications against tampering, reverse engineering, code injection, and malware. Its distinctive mechanism is post-compile integration: protection is wrapped around an already-built APK, AAB, or IPA in minutes, with no source code access or code changes. A cryptographic application binding ties the protection to the app, so attempts to remove or disable Shield cause the app to stop functioning.
How it works
The product layers multiple defenses into the application binary, providing protection both at rest and at runtime. It detects rooting, jailbreaking, debuggers, hooking frameworks, repackaging, screen overlays, and keyloggers, then responds according to configuration by blocking the action, terminating the app, or reporting the event to monitoring systems. Hardening includes execution flow control, process integrity checks, Android code obfuscation, and secure local storage. Coverage spans Android, iOS, Chrome OS, HarmonyOS, and Amazon Fire OS, and extends to protecting on-device AI models from tampering and theft. Raiffeisenbank uses Shield for Mobile to protect its eKonto banking app.
Credentials and traction
Promon maintains ISO 27001 and SOC 2 compliance, and its Trust Center documents DORA-aligned controls for EU financial services. Promon was recognized in the 2024 Gartner Hype Cycle for Application Security in the application shielding category, its seventh appearance in that report. Shield for Mobile serves banks, fintechs, payment providers, gaming, and streaming companies; Raiffeisenbank uses it to protect its eKonto banking app, and Promon technology secures apps used by more than 2 billion people across over 500 customers.
Key Capabilities
mapped to solution categoriesApplies name obfuscation, control-flow obfuscation, string and resource encryption, and code virtualization to impede static and dynamic reverse engineering of the protected application.
Instruments runtimes to intercept database queries, command execution, and deserialization across Java, .NET, Python, Node.js, PHP, Ruby, and Go, with coverage depth varying by product.
Detects compromised runtime environments at startup and during execution, including rooted Android devices, jailbroken iOS devices, emulators, and attached debuggers, and reacts per policy when an untrusted environment is found.
Verifies the integrity of application code, resources, and the execution environment at runtime, detecting repackaging, method hooking, and dynamic instrumentation such as Frida, and triggering a defensive response when tampering is detected.
Operate in monitor-only mode (log and alert), or active blocking mode (terminate request upon detection). Most deployments begin in monitor mode to establish a false positive baseline before enabling blocking.
Compliance
certificationsIntegrations
compatible toolsImplementation & support
Info last updated on June 26, 2026
Vendors
Is this your product?
Claim your profile to connect with the teams looking for your solutions.