About Guardsquare
Guardsquare sells a suite of mobile app security solutions for businesses across industries. Guardsquare began with its open-source mobile app shrinker, ProGuard. ProGuard is the technology behind the minification of Android applications. Guardsquare offers ProGuard as an open source optimizer to shrink and obfuscate Java and Kotlin apps.[5][6]
DexGuard secures native Android and cross-platform apps and SDKs with multilayered, polymorphic obfuscation and built-in runtime application self-protection (RASP). iXGuard secures native iOS and cross-platform apps and SDKs with multilayered, polymorphic obfuscation and built-in RASP. Guardsquare says its code hardening and RASP techniques are applied polymorphically and automatically, so no two builds feature the same protections. DexGuard and iXGuard use dozens of code obfuscation, encryption and RASP techniques. DexGuard and iXGuard apply their hardening measures differently with each new build.[7][8][9]
DexGuard obfuscates each of its integrity checks, so an attacker cannot learn where and how the application detects integrity violations. DexGuard and iXGuard implement a diverse set of environment safety checks, including debugger and emulator detection. DexGuard and iXGuard implement root and jailbreak detections as a layer of mobile application protection. DexGuard and iXGuard operate as command-line, post-build compiler tools, run locally or on a CI/CD server.[6][8][10]
AppSweep is the Guardsquare app security testing product for finding and addressing security issues in mobile apps and SDKs. Developers can integrate the AppSweep CLI into CI pipelines such as Bitrise, Fastlane, Github and Jenkins to detect issues during development. AppSweep groups findings according to OWASP MASVS. AppSweep performs in-depth code analysis beyond common pattern matching approaches. AppSweep findings are backed by advanced control and data flow analysis and can be augmented through interactive runtime testing. AppSweep Enterprise supports the upload of larger apps and lets teams define automated data retention policies. Guardsquare describes AppSweep as designed for developers and ready for enterprise needs.[7]
ThreatCast monitors threats to mobile apps and SDKs in real time, adapts security configurations and identifies security gaps and vulnerabilities after publication. ThreatCast provides real-time visibility for Android and iOS apps. ThreatCast provides documented evidence of active runtime defenses for auditors. ThreatCast enables server-to-server integration to inform the application server side about mobile threats. Guardsquare app attestation lets developers ensure that any mobile app calling their APIs is authentic and untampered. Guardsquare says policy-based controls can block automated bots, malicious scripts and non-genuine apps from interaction with backend services. App attestation gathers insights about the behavior of users and their devices, helping security teams fine-tune policies without rebuilding the application.[6][8][9][10]
Guardsquare says it simplifies compliance with PCI MPoC, PSD2, PSD3 and PCI DSS standards by enforcing binary code protection, key encryption and cryptographic app attestation. Guardsquare provides multi-layered code obfuscation, resource encryption and RASP checks to safeguard cardholder data and cryptographic keys in mobile payment and SoftPOS apps. Guardsquare aligns directly with OWASP MASVS and the STRIDE frameworks. Guardsquare says teams can streamline FDA, EU-MDR and ISO compliance by integrating automated mobile security testing, multilayered code protection and real-time threat monitoring into the SDLC. Guardsquare says its guided workflow simplifies mobile app protection for teams.[10][11]
Guardsquare says its clients include global financial services institutions, medical and healthcare organizations, and gaming, retail and eCommerce companies. Guardsquare says mobile banking apps on unmanaged devices are constantly targeted by advanced malware and account takeover fraud. Guardsquare says it combines mobile app testing with multi-layered protections for FinTech developers to prevent fraud and maintain regulatory compliance. Guardsquare says a cloned or repackaged mobile e-commerce app can let threat actors trick customers into providing sensitive information. Roel Caers is CEO of Guardsquare. Sander Bogaert leads the technical teams at Guardsquare, and joined Guardsquare very early on and built iXGuard from scratch.[2][5][8][11][12][13]
Guardsquare on the record