Question 1

What OWASP MASVS checks are performed?

Accepted Answer

The analysis covers the MSTG controls: data storage (M1), network communication (M3), authentication (M4), source code (M7) and platform protection (M8). Checks include detecting hardcoded secrets, HTTP URLs, dangerous permissions and security compilation flags.

Question 2

What is an .ipa file?

Accepted Answer

An .ipa (iOS App Archive) file is the distribution format for iOS applications. It contains the compiled binary, resources, entitlements (permissions) and signing certificate. The tool extracts and analyzes these components to detect mobile security vulnerabilities.

Question 3

Are IPA files sent to your servers?

Accepted Answer

No, the analysis is 100% performed in your browser. The IPA file is never transmitted over the network, letting you safely analyze confidential applications (enterprise apps, in-development builds).

iOS IPA Analyzer

Drag your .ipa file here