Dashboard
Coverage overview
| Metric | Value |
|---|---|
| Total vulnerabilities | 218 |
| MASVS categories | 15 |
| Standards | OWASP Mobile Top 10 (2024), MASVS/MASTG, OWASP LLM Top 10 (2025), OWASP Agentic Top 10 (2025) |
Vulnerabilities by category
| Category | OWASP Mobile | Count | Easy | Medium | Hard |
|---|---|---|---|---|---|
| Insecure Data Storage | M9 | 17 | 7 | 6 | 4 |
| Insufficient Cryptography | M10 | 10 | 2 | 7 | 1 |
| Insecure Authentication / Authorization | M3 | 27 | 3 | 14 | 10 |
| Insecure Communication | M5 | 5 | 1 | 3 | 1 |
| Improper Platform Usage | M4 | 68 | 7 | 27 | 34 |
| Code Quality & Build Config | M7 | 5 | 3 | 1 | 1 |
| Insufficient Resilience | M7 | 10 | 0 | 6 | 4 |
| Supply Chain (OWASP Mobile M2) | M2 | 8 | 2 | 3 | 3 |
| Privacy (OWASP Mobile M6) | M6 | 9 | 3 | 5 | 1 |
| Input Validation (OWASP Mobile M4) | M4 | 5 | 0 | 3 | 2 |
| AI/ML (OWASP LLM/GenAI Top 10) | M4 | 13 | 4 | 8 | 1 |
| Agentic AI (OWASP Agentic Top 10) | M4 | 9 | 0 | 1 | 8 |
| AI + Mobile (LLM x IPC / WebView) | M4 | 5 | 0 | 2 | 3 |
| Native / WebView Bridge (JS <-> Native) | M4 | 15 | 1 | 5 | 9 |
| Privileged System-Provider Activation | M4 | 12 | 0 | 7 | 5 |