Promon

What the company sells

Promon sells the Runtime Intelligence Platform for apps, which embeds protection into compiled applications with no source code changes and no SDK. The Promon Runtime Intelligence Platform runs inside every protected application and is not added as an external layer or SDK. Every Promon product is part of the Promon Runtime Intelligence Platform, and each product belongs to one of four capability layers: Enforcement, Data, Intelligence, and Tools. Promon products share the same telemetry, controls, and deployment model, so a buyer can adopt one product or combine many.

Shield is the base on which the Promon Runtime Intelligence Platform is built. Shield streams trusted telemetry out of the running app and feeds updated protection policies back in, while Shield continues to act autonomously. Shield protects mobile, desktop, web and SDK apps from the inside, embedded into the compiled build, with no code changes and nothing for a team to rewrite. Promon has worked on runtime app protection and app shielding for two decades. App shielding developed from university research.

Shield for Mobile secures iOS and Android apps post-compile with no code changes. Shield for Mobile integrates into a CI/CD pipeline and supports all major build systems and frameworks. Shield for Mobile enforces runtime protections that align with global regulations like GDPR, PSD2, DORA, and CCPA. Raiffeisenbank released a new version of its mobile eKonto app. Promon protects Raiffeisenbank's mobile app users against malware and threats related to operating system weaknesses.

Promon Shield for Desktop builds desktop application security into Windows and macOS apps. Shield for Desktop creates a secure execution environment for apps by blocking unwanted interactions initiated by possible malware residing on the system. Shield for Desktop integrates with existing tooling and supports zero-trust architecture.

Promon Code Protect protects compiled code from static and dynamic analysis by applying multi-layer obfuscation and encryption post-compile. Code Protect integrates post-compile into any CI/CD pipeline. Promon Data Protect encrypts and isolates sensitive assets inside the app package and on the device. SAROM protects information built into an app, like API keys or certificates, before the app is published. SLS protects data stored on the device, like session tokens. Promon Verify ensures that only genuine, untampered apps can connect to backend APIs. Promon Verify authenticates each request through in-band attestation, confirming the integrity of both the app and its runtime environment. Promon Verify is fully self-hosted and stateless.

Promon Control is a runtime configuration layer for Shield for Mobile protected apps. Promon Control is a post-deploy app security runtime control layer that lets teams manage runtime protection after an app is already live. Promon Control is the control plane for Shield for Mobile, allowing for continuous protection, autonomous threat response and granular policy tuning. Promon Insight for App Risk is a device-risk signal layer for mobile apps. Insight for App Risk collects, enriches, and delivers security-relevant signals from inside the app, powered by the in-app protection engine of Promon Shield. Insight for App Risk ranks devices by configurable risk scores. Promon Shield embeds directly into the app, collecting on-device signals like RAT detection, emulator activity, VPN use, active-call detection, and motion anomalies. Teams with an existing fraud platform feed signals directly into it, while teams without one get a purpose-built risk workspace.

The telemetry, analytics and decisioning layer can run on prem, as SaaS, or hybrid. Prebuilt connectors feed high fidelity telemetry and decisions into existing SIEM, SOAR and data lake tools. Model Context Protocol endpoints let agents query live app posture and act on the loop, within guardrails that customers set.

Promon states that it has spent two decades safeguarding global banks, gaming companies, public institutions and media giants. Promon protects payment apps and digital wallets against tampering, API abuse, and device-based fraud. Promon protects citizen-facing apps from tampering, repackaging, and data breaches. Promon protects patient data and prevents unauthorized access, and addresses compliance with healthcare regulations. Promon protects connected vehicle apps and in-car software from reverse engineering, data theft, and unauthorized access.^{[2][3][6][7][8][9][10][11][12][13][14]}

Categories

• Application shielding and RASP (primary category)
• Compare Promon with companies in the same categoryside by side

Headquarters

Oslo, Norway^[1]

Founded

Not established from our sources

Ownership

Not established from our sources

CISO on record

Not yet on our record. Send a verified source

Website

promon.io

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Promon Shield for Desktop^[4][8]

  Promon Shield for Desktop builds desktop application security into Windows and macOS apps.

  Promon Shield for Desktop builds desktop application security into Windows and macOS apps. Shield for Desktop creates a secure execution environment for apps by blocking unwanted interactions initiated by possible malware residing on the system. Shield for Desktop integrates with existing tooling and supports zero-trust architecture.

• Promon Code Protect^[4][9]

  Promon Code Protect protects compiled code from static and dynamic analysis.

  Promon Code Protect protects compiled code from static and dynamic analysis by applying multi-layer obfuscation and encryption post-compile. Encrypts sensitive code and data sections within binaries, preventing attackers from performing static analysis or extracting core logic. Computes hashes and checksums across code regions to detect unauthorized changes.

• Promon Data Protect^[4][10]

  Encrypts and isolates sensitive assets inside the app package and on the device.

  Promon Data Protect encrypts and isolates sensitive assets inside the app package and on the device. SAROM protects information built into an app, like API keys or certificates, before the app is published. SLS protects data stored on the device, like session tokens.

• Promon Verify^[4][11]

  Ensures that only genuine, untampered apps can connect to backend APIs.

  Promon Verify ensures that only genuine, untampered apps can connect to backend APIs. Promon Verify authenticates each request through in-band attestation, confirming the integrity of both the app and its runtime environment. Promon Verify is fully self-hosted and stateless.

• Promon Control^[12]

  Promon Control is a runtime configuration layer for Shield for Mobile protected apps.

  Promon Control is a runtime configuration layer for Shield for Mobile protected apps. Promon Control is a post-deploy app security runtime control layer. Teams can update policies, adjust threat responses, and push configuration changes to apps protected by Shield for Mobile without re-shielding, rebuilding, or triggering an app store submission.

• Promon Insight for App Risk^[13]

  Promon Insight for App Risk is a device-risk signal layer for mobile apps.

  Promon Insight for App Risk is a device-risk signal layer for mobile apps. Insight for App Risk collects, enriches, and delivers security-relevant signals from inside the app. Insight for App Risk ranks devices by configurable risk scores.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Promon's categories, then alphabetical. A list from the record, never a ranking.

• On application shielding and rasp, Promon competes with Appdome, Contrast Security, Guardsquare, PreEmptive Solutions, OneSpan and Protectt.ai.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

• G2 · 4.4 out of 5^[5]seen November 10, 2026

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• June 30, 2026

  Promon and LexisNexis Risk Solutions announced a strategic alliance to strengthen fraud prevention in mobile apps. Promon^[15]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]Promon completes acquisition of codesealer extending protection to web applications and the apis behind themPromon · promon.io · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
2. [2]promon.ioPromon · promon.io · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
3. [3]Promon Platform | The runtime intelligence platform for app securityPromon · undated page, accessed October 27, 2026 · Tier A: the company, a regulator or a filing
4. [4]Promon | Runtime app protection and intelligence platformPromon · undated page, accessed October 27, 2026 · Tier A: the company, a regulator or a filing
5. [5]Promon Shield for Mobile Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 27, 2026 · Tier C
6. [6]Promon products | App security built for every surfacePromon · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
7. [7]Promon Shield for Mobile: Always-on mobile app security | PromonPromon · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
8. [8]Promon Shield for Desktop: App shielding for Windows & macOS | PromonPromon · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]Promon Code Protect: Post-compile IP and code protection for mobile apps | PromonPromon · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
10. [10]Promon Data Protect: Secure sensitive data and app secrets | PromonPromon · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
11. [11]Promon Verify: API trust and attestation for mobile apps | PromonPromon · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
12. [12]Promon Control | Post-Deploy Runtime Protection Without Re-ShieldingPromon · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
13. [13]Promon Insight for App Risk™ mobile fraud & risk analytics | PromonPromon · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
14. [14]Promon solutions | App security by outcome, industry and use casePromon · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
15. [15]LexisNexis Risk Solutions and Promon align to strengthen mobile fraud preventionPromon · published June 30, 2026 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 10, 2026 from the references above.

Work for Promon? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.