CriticalBlue Ltd

CriticalBlue Ltd makes Approov, a security service that checks each mobile app is genuine before it can call a company's back-end APIs. It works across iOS, Android and HarmonyOS, and aims to block bots, scripts and tampered or fake copies of an app.

What CriticalBlue Ltd offers

• App attestation — the app contacts Approov's cloud service, is verified and receives a short-lived token to present to protected APIs.
• Runtime self-protection — detection of rooted or jailbroken devices, debuggers, emulators and malicious frameworks.
• Secrets management — API keys held in the cloud, rotated as needed and sent only to verified apps at runtime.
• Channel security — certificate pinning for TLS, with pins updated remotely.
• Threat analytics — real-time visibility of how apps are being attacked.
• Over-the-air policy updates — quick changes in response to new threats, plus CI/CD integration.

Who it works with

Approov serves organisations that run mobile apps, with banking and financial services and car-sharing among the cases shown.

Key facts

• Product: Approov
• Platforms: iOS, Android and HarmonyOS