Approov is a Runtime Application Self-Protection (RASP) and API security solution that provides mobile app and API protection through dynamic attestation and certificate pinning. It validates the authenticity and integrity of mobile applications in real-time, protecting APIs from unauthorized access, tampering, reverse engineering, automated attacks, and man-in-the-middle attacks. The system integrates with mobile applications through SDKs across Android, iOS, and HarmonyOS platforms, performing continuous runtime security checks and issuing signed JSON Web Tokens (JWTs) or JSON Web Encryption (JWE) tokens only to verified genuine applications. Approov implements dynamic certificate pinning with over-the-air updates, secure API communications, cloud-based secret management, and comprehensive device security analysis. The solution includes real-time threat monitoring, automated app launch detection, and integration with platform-specific security services like Apple DeviceCheck, AppAttest, Google SafetyNet, and Play Integrity API.
