CISO Tribune

Vendor comparison · 2 companies

Guardsquare vs Promon

Guardsquare sells a suite of mobile app security solutions for businesses across industries. Promon sells the Runtime Intelligence Platform for apps, which embeds protection into compiled applications with no source code changes and no SDK. CISO Tribune files both under Application shielding and RASP. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Guardsquare
  • Promon
Guardsquare vs Promon: Products, Customers and Funding Compared
GuardsquareGuardsquare sells a suite of mobile app security solutions for businesses across industries.guardsquare.comPromonPromon sells the Runtime Intelligence Platform for apps, which embeds protection into compiled applications with no source code changes and no SDK.promon.io
What it sells
  • AppSweep[3][7]App security testing product for mobile apps and SDKs.
  • App attestation[3][8][11]Ensures a mobile app calling your APIs is authentic and untampered.
  • ProGuard[1][3][5][6]Open source optimizer to shrink and obfuscate Java and Kotlin apps.
  • Promon Shield for Desktop[4][8]Promon Shield for Desktop builds desktop application security into Windows and macOS apps.
  • Promon Code Protect[4][9]Promon Code Protect protects compiled code from static and dynamic analysis.
  • Promon Data Protect[4][10]Encrypts and isolates sensitive assets inside the app package and on the device.
  • Promon Verify[4][11]Ensures that only genuine, untampered apps can connect to backend APIs.
  • Promon Control[12]Promon Control is a runtime configuration layer for Shield for Mobile protected apps.
  • Promon Insight for App Risk[13]Promon Insight for App Risk is a device-risk signal layer for mobile apps.
Categories
Headquarters
Leuven, Belgium[1]Oslo, Norway[1]
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Privately held[3][4][15]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 6, 2026Guardsquare announced the opening of its regional office in Singapore, its first physical presence in Asia-Pacific.[14]
  • February 5, 2026Guardsquare completed the acquisition of the Extended Threat Defense technology and assets from Verimatrix.[15]
  • June 30, 2026Promon and LexisNexis Risk Solutions announced a strategic alliance to strengthen fraud prevention in mobile apps.[15]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: listed, seen November 5, 2026[4]
  • G2: listed, seen November 10, 2026[5]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Guardsquare sells to financial services institutions, medical and healthcare organizations, and gaming, retail and eCommerce companies. Guardsquare addresses FinTech developers who need to protect financial transactions and user accounts. Guardsquare directs its banking pages at mobile banking apps that run on unmanaged devices. Guardsquare describes AppSweep as designed for developers and ready for enterprise needs.Promon addresses security, fraud, product, and compliance teams. Security teams can respond to new threat intelligence, fraud teams can tighten or relax app-level responses based on live signals, and product teams can enforce upgrade policies. Gaming companies are offered protection against cheaters and reverse engineering, and protection for in-app purchases. The telemetry, analytics and decisioning layer can run on prem, as SaaS, or hybrid.
Last verified
November 9, 2026September 27, 2026

Where they overlap

  • Application shielding and RASP is the primary category of both Guardsquare and Promon.

Where they differ, field by field

  • Guardsquare lists AppSweep, App attestation and ProGuard. Promon lists Promon Shield for Desktop, Promon Code Protect, Promon Data Protect, Promon Verify, Promon Control and 1 more.
  • Guardsquare is headquartered in Leuven, Belgium. Promon is headquartered in Oslo, Norway.
  • Guardsquare is privately held.

How they differ

CISO Tribune files both Guardsquare and Promon under Application shielding and RASP as their primary category. Guardsquare is headquartered in Leuven, Belgium, and is privately held. Promon is headquartered in Oslo, Norway.

Guardsquare sells AppSweep, an app security testing product for mobile apps and SDKs, along with App attestation and ProGuard, an open source optimizer to shrink and obfuscate Java and Kotlin apps. Its DexGuard and iXGuard products secure Android and iOS apps with obfuscation and built-in RASP. Guardsquare says its clients include financial services institutions, medical and healthcare organizations, and gaming, retail and eCommerce companies. On February 5, 2026, Guardsquare completed the acquisition of the Extended Threat Defense technology and assets from Verimatrix, and on October 6, 2026 it announced a regional office in Singapore, its first physical presence in Asia-Pacific.

Promon sells a Runtime Intelligence Platform that embeds protection into compiled applications with no source code changes and no SDK. Its products include Promon Shield for Desktop for Windows and macOS apps, Promon Code Protect, Promon Data Protect, Promon Verify, Promon Control and Promon Insight for App Risk. Promon Verify ensures that only genuine, untampered apps can connect to backend APIs, a purpose that parallels Guardsquare's App attestation. Promon states that it has spent two decades safeguarding global banks, gaming companies, public institutions and media giants, and it protects Raiffeisenbank's mobile app users against malware. On June 30, 2026, Promon and LexisNexis Risk Solutions announced a strategic alliance to strengthen fraud prevention in mobile apps.

What it sells: Guardsquare

What AppSweep does[3][7]
AppSweep finds and addresses security issues in mobile apps and SDKs. Developers can integrate the AppSweep CLI into CI pipelines such as Bitrise, Fastlane, Github and Jenkins. AppSweep groups findings according to OWASP MASVS. AppSweep Enterprise supports the upload of larger apps and lets teams define automated data retention policies.
What App attestation does[3][8][11]
App attestation lets developers ensure that any mobile app calling their APIs is authentic and untampered. App attestation gathers insights about the behavior of users and their devices, helping security teams fine-tune policies without rebuilding the application.
What ProGuard does[1][3][5][6]
Guardsquare offers ProGuard as an open source optimizer to shrink and obfuscate Java and Kotlin apps. ProGuard is the technology behind the minification of Android applications.

What it sells: Promon

What Promon Shield for Desktop does[4][8]
Promon Shield for Desktop builds desktop application security into Windows and macOS apps. Shield for Desktop creates a secure execution environment for apps by blocking unwanted interactions initiated by possible malware residing on the system. Shield for Desktop integrates with existing tooling and supports zero-trust architecture.
What Promon Code Protect does[4][9]
Promon Code Protect protects compiled code from static and dynamic analysis by applying multi-layer obfuscation and encryption post-compile. Encrypts sensitive code and data sections within binaries, preventing attackers from performing static analysis or extracting core logic. Computes hashes and checksums across code regions to detect unauthorized changes.
What Promon Data Protect does[4][10]
Promon Data Protect encrypts and isolates sensitive assets inside the app package and on the device. SAROM protects information built into an app, like API keys or certificates, before the app is published. SLS protects data stored on the device, like session tokens.
What Promon Verify does[4][11]
Promon Verify ensures that only genuine, untampered apps can connect to backend APIs. Promon Verify authenticates each request through in-band attestation, confirming the integrity of both the app and its runtime environment. Promon Verify is fully self-hosted and stateless.
What Promon Control does[12]
Promon Control is a runtime configuration layer for Shield for Mobile protected apps. Promon Control is a post-deploy app security runtime control layer. Teams can update policies, adjust threat responses, and push configuration changes to apps protected by Shield for Mobile without re-shielding, rebuilding, or triggering an app store submission.
What Promon Insight for App Risk does[13]
Promon Insight for App Risk is a device-risk signal layer for mobile apps. Insight for App Risk collects, enriches, and delivers security-relevant signals from inside the app. Insight for App Risk ranks devices by configurable risk scores.

Questions about Guardsquare and Promon

What do Guardsquare and Promon sell?
Guardsquare sells AppSweep, App attestation and ProGuard. Promon sells Promon Shield for Desktop, Promon Code Protect, Promon Data Protect, Promon Verify, Promon Control and 1 more.
Are Guardsquare and Promon in the same category?
Yes. Application shielding and RASP is the primary category of both on CISO Tribune.
Where are Guardsquare and Promon headquartered?
Guardsquare is headquartered in Leuven, Belgium. Promon is headquartered in Oslo, Norway.
Who owns Guardsquare and Promon?
Guardsquare is privately held.
Who are Guardsquare and Promon sold to?
From its own pages, Guardsquare sells to financial services institutions, medical and healthcare organizations, and gaming, retail and eCommerce companies. Promon addresses security, fraud, product, and compliance teams.
What have Guardsquare and Promon announced recently?
October 6, 2026: Guardsquare announced the opening of its regional office in Singapore, its first physical presence in Asia-Pacific. June 30, 2026: Promon and LexisNexis Risk Solutions announced a strategic alliance to strengthen fraud prevention in mobile apps.

About Guardsquare

Guardsquare sells a suite of mobile app security solutions for businesses across industries. Guardsquare began with its open-source mobile app shrinker, ProGuard. ProGuard is the technology behind the minification of Android applications. Guardsquare offers ProGuard as an open source optimizer to shrink and obfuscate Java and Kotlin apps.[5][6]

DexGuard secures native Android and cross-platform apps and SDKs with multilayered, polymorphic obfuscation and built-in runtime application self-protection (RASP). iXGuard secures native iOS and cross-platform apps and SDKs with multilayered, polymorphic obfuscation and built-in RASP. Guardsquare says its code hardening and RASP techniques are applied polymorphically and automatically, so no two builds feature the same protections. DexGuard and iXGuard use dozens of code obfuscation, encryption and RASP techniques. DexGuard and iXGuard apply their hardening measures differently with each new build.[7][8][9]

DexGuard obfuscates each of its integrity checks, so an attacker cannot learn where and how the application detects integrity violations. DexGuard and iXGuard implement a diverse set of environment safety checks, including debugger and emulator detection. DexGuard and iXGuard implement root and jailbreak detections as a layer of mobile application protection. DexGuard and iXGuard operate as command-line, post-build compiler tools, run locally or on a CI/CD server.[6][8][10]

AppSweep is the Guardsquare app security testing product for finding and addressing security issues in mobile apps and SDKs. Developers can integrate the AppSweep CLI into CI pipelines such as Bitrise, Fastlane, Github and Jenkins to detect issues during development. AppSweep groups findings according to OWASP MASVS. AppSweep performs in-depth code analysis beyond common pattern matching approaches. AppSweep findings are backed by advanced control and data flow analysis and can be augmented through interactive runtime testing. AppSweep Enterprise supports the upload of larger apps and lets teams define automated data retention policies. Guardsquare describes AppSweep as designed for developers and ready for enterprise needs.[7]

ThreatCast monitors threats to mobile apps and SDKs in real time, adapts security configurations and identifies security gaps and vulnerabilities after publication. ThreatCast provides real-time visibility for Android and iOS apps. ThreatCast provides documented evidence of active runtime defenses for auditors. ThreatCast enables server-to-server integration to inform the application server side about mobile threats. Guardsquare app attestation lets developers ensure that any mobile app calling their APIs is authentic and untampered. Guardsquare says policy-based controls can block automated bots, malicious scripts and non-genuine apps from interaction with backend services. App attestation gathers insights about the behavior of users and their devices, helping security teams fine-tune policies without rebuilding the application.[6][8][9][10]

Guardsquare says it simplifies compliance with PCI MPoC, PSD2, PSD3 and PCI DSS standards by enforcing binary code protection, key encryption and cryptographic app attestation. Guardsquare provides multi-layered code obfuscation, resource encryption and RASP checks to safeguard cardholder data and cryptographic keys in mobile payment and SoftPOS apps. Guardsquare aligns directly with OWASP MASVS and the STRIDE frameworks. Guardsquare says teams can streamline FDA, EU-MDR and ISO compliance by integrating automated mobile security testing, multilayered code protection and real-time threat monitoring into the SDLC. Guardsquare says its guided workflow simplifies mobile app protection for teams.[10][11]

Guardsquare says its clients include global financial services institutions, medical and healthcare organizations, and gaming, retail and eCommerce companies. Guardsquare says mobile banking apps on unmanaged devices are constantly targeted by advanced malware and account takeover fraud. Guardsquare says it combines mobile app testing with multi-layered protections for FinTech developers to prevent fraud and maintain regulatory compliance. Guardsquare says a cloned or repackaged mobile e-commerce app can let threat actors trick customers into providing sensitive information. Roel Caers is CEO of Guardsquare. Sander Bogaert leads the technical teams at Guardsquare, and joined Guardsquare very early on and built iXGuard from scratch.[2][5][8][11][12][13]

Guardsquare on the record

Sources

Guardsquare full record

  1. [1]Guardsquare announces departure co founder heidi rakelsGuardsquare · guardsquare.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Guardsquare announces 29 million investment battery venturesGuardsquare · guardsquare.com · published January 28, 2019 · Tier A
  3. [3]Leader In Mobile App Security | GuardsquareGuardsquare · undated page, accessed October 25, 2026 · Tier A
  4. [4]GuardSquare Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 25, 2026 · Tier C
  5. [5]About Us - Read Here | GuardsquareGuardsquare · undated page, accessed November 5, 2026 · Tier A
  6. [6]Mobile Finance App Security Compliance in Pakistan | GuardsquareGuardsquare · undated page, accessed November 5, 2026 · Tier A
  7. [7]Mobile Application Security Testing | AppSweepGuardsquare · undated page, accessed November 5, 2026 · Tier A
  8. [8]Mobile App Security for FinTech | GuardsquareGuardsquare · undated page, accessed November 5, 2026 · Tier A
  9. [9]What is Mobile App Security? | GuardsquareGuardsquare · undated page, accessed November 5, 2026 · Tier A
  10. [10]Regulatory Compliance for Mobile App Security | GuardsquareGuardsquare · undated page, accessed November 5, 2026 · Tier A
  11. [11]Mobile Banking Security Solution | GuardsquareGuardsquare · undated page, accessed November 5, 2026 · Tier A
  12. [12]Learn About Our Customers | GuardsquareGuardsquare · undated page, accessed November 5, 2026 · Tier A
  13. [13]Mobile Retail and E-Commerce Application Protection | GuardsquareGuardsquare · undated page, accessed November 5, 2026 · Tier A
  14. [14]Guardsquare Accelerates Asia-Pacific Growth with Office Opening in SingaporeGuardsquare · published October 6, 2026 · Tier A
  15. [15]Guardsquare Acquires Verimatrix XTD, Setting a New Standard for End-to-End Mobile App SecurityGuardsquare · published February 5, 2026 · Tier A

Promon full record

  1. [1]Promon completes acquisition of codesealer extending protection to web applications and the apis behind themPromon · promon.io · undated page, accessed September 27, 2026 · Tier A
  2. [2]promon.ioPromon · promon.io · undated page, accessed September 27, 2026 · Tier A
  3. [3]Promon Platform | The runtime intelligence platform for app securityPromon · undated page, accessed October 27, 2026 · Tier A
  4. [4]Promon | Runtime app protection and intelligence platformPromon · undated page, accessed October 27, 2026 · Tier A
  5. [5]Promon Shield for Mobile Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 27, 2026 · Tier C
  6. [6]Promon products | App security built for every surfacePromon · undated page, accessed November 10, 2026 · Tier A
  7. [7]Promon Shield for Mobile: Always-on mobile app security | PromonPromon · undated page, accessed November 10, 2026 · Tier A
  8. [8]Promon Shield for Desktop: App shielding for Windows & macOS | PromonPromon · undated page, accessed November 10, 2026 · Tier A
  9. [9]Promon Code Protect: Post-compile IP and code protection for mobile apps | PromonPromon · undated page, accessed November 10, 2026 · Tier A
  10. [10]Promon Data Protect: Secure sensitive data and app secrets | PromonPromon · undated page, accessed November 10, 2026 · Tier A
  11. [11]Promon Verify: API trust and attestation for mobile apps | PromonPromon · undated page, accessed November 10, 2026 · Tier A
  12. [12]Promon Control | Post-Deploy Runtime Protection Without Re-ShieldingPromon · undated page, accessed November 10, 2026 · Tier A
  13. [13]Promon Insight for App Risk™ mobile fraud & risk analytics | PromonPromon · undated page, accessed November 10, 2026 · Tier A
  14. [14]Promon solutions | App security by outcome, industry and use casePromon · undated page, accessed November 10, 2026 · Tier A
  15. [15]LexisNexis Risk Solutions and Promon align to strengthen mobile fraud preventionPromon · published June 30, 2026 · Tier A

Spot a factual error? Request a correction.