Mobile application security assessments against OWASP MASVS v2.1.0, MAS-L1 testing profile. Android and iOS, static and dynamic.
- Site: vybebat.dev
- Contact: hello@vybebat.dev
- An assessment, not a penetration test. We say which one you are buying before you pay.
- Every finding carries evidence you can quote, the business impact in plain language, and a remediation snippet a developer can paste.
- A control we could not test is reported as NOT_TESTED with the reason. We never pad a report with passes we did not verify.
- Third-party scanner output is treated as candidates, never as findings.
- masvs-coverage - which MASVS v2.1 controls can be decided by a machine, and which still need a human.