Where this offering fits
Arxan Security is Digital.ai’s mobile and desktop application-hardening enquiry. It addresses protection of an application artefact in the environment where it runs, which differs from scanning source code for defects. Define the application platforms and tampering or reverse-engineering risks to evaluate.
Architecture and rollout decisions
Confirm supported build formats, operating systems and integration prerequisites. Pilot a representative non-production build and validate normal functionality, distribution and update behaviour. Agree authorised resilience testing and the evidence needed to assess the selected protections. Keep source review, backend security and data-access controls in scope where separately required; hardening is not a replacement for those controls.
An evaluation scenario for this offering
Use a representative non-production application build with approved test data and a documented functional baseline. Apply only the protections included in the proposed Arxan configuration, then repeat installation, login, ordinary workflows and an update through the intended distribution path. Include a supported authorisation check for resilience assessment without publishing bypass techniques or production secrets. Compare compatibility and user-visible behaviour with the baseline, retaining build identifiers and settings. The evidence should show both that the protected application still performs its intended tasks and that the selected protection can be evaluated within an authorised method; it should not substitute for fixing application vulnerabilities.
Evidence to request for this scope
- Obtain current platform and build-tool compatibility.
- Validate signed or packaged application behaviour after protection.
- Record testing authority and update procedures.