Safeguard
Tag

mobile-security

Safeguard articles tagged "mobile-security" — guides, analysis, and best practices for software supply chain and application security.

53 articles

Open Source

react-native-confirmation-code-field: Building Secure OTP Input

This tiny React Native library gives you a clean OTP entry UI, but a secure one-time-code flow is mostly about what happens around the field, not in it.

Jul 17, 20266 min read
Open Source Security

Mobile app dependency vulnerability trends

Mobile apps now ship more third-party code than first-party. Safeguard's analysis breaks down where dependency vulnerabilities cluster and why.

Jul 14, 20267 min read
Buyer's Guides

Best software composition analysis tools for mobile appli...

A no-hype comparison of mobile SCA tools for scanning iOS and Android dependencies, generating SBOMs, and catching open-source vulnerabilities before release.

Jul 13, 20267 min read
Open Source

@twotalltotems/react-native-otp-input: A Security Guide

This popular OTP input component for React Native has not shipped an update in years. Here is a security guide to using @twotalltotems/react-native-otp-input, or moving off it.

Jul 9, 20265 min read
Application Security

Implementing SSL/TLS certificate pinning in Node.js

HTTP Public Key Pinning died in Chrome 67 back in 2018, yet Node.js apps still need pinning for mobile backends and server-to-server calls — here's how to do it without bricking your own API.

Jul 8, 20266 min read
Security Guides

Dart and Flutter Security Best Practices: Storage, Transport, and the pub.dev Supply Chain

A Flutter binary ships to both stores from one codebase — including any hardcoded secret, any disabled TLS check, and any vulnerable pub.dev package. Here is how to close each gap.

Jul 7, 20266 min read
AppSec

Mobile Application Penetration Testing: A Practical Guide

How mobile application penetration testing actually works — the methodology, the tools, and what to expect from a good engagement — from someone who runs them.

Jun 29, 20266 min read
Open Source

React Native Cookies: Managing and Securing Session Cookies

A guide to react-native-cookies for reading and writing HTTP cookies in React Native apps, the platform gotchas, and how to keep session cookies secure.

Jun 26, 20265 min read
Open Source

react-native-compressor: Security and Trust Considerations for Media Compression

react-native-compressor shrinks images, video, and audio on-device before upload. Here is how to vet it, its native footprint, and where the real risks are.

Jun 22, 20266 min read
AppSec

App Vulnerability Scanner: How It Works and What to Use

An app vulnerability scanner automatically probes your application for known flaws and misconfigurations. Here is how the main types work and how to pick the right one.

Jun 16, 20266 min read
Open Source

Is react-native-pager-view Safe? A Security Look at the Package

react-native-pager-view is a widely used swipeable-pager component with a healthy maintenance record. Here is how to assess its supply-chain risk and pin it safely in a React Native app.

Jun 13, 20266 min read
Open Source

React Native MMKV: Fast Storage and How to Keep It Secure

React Native MMKV is the fastest key-value store for React Native, but speed does not equal security. Here is how to use it and how to protect the data you put in it.

Jun 12, 20265 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

mobile-security — Safeguard Blog