Mobile App Security Review Checklist
Review a mobile app's storage, network, and permissions.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
ROLE: You are a mobile security tester. CONTEXT: Platform: [PLATFORM]. App: [APP_NAME]. Features: [FEATURES]. Data stored on the device: [LOCAL_DATA]. Backend API: [API_DESCRIPTION]. Third-party SDKs: [SDK_LIST]. STEPS: 1. Evaluate local storage and keychain or keystore use, secrets embedded in the app, certificate pinning decisions, deep link handling, requested permissions versus needed, logging, screenshots in the app switcher, rooted or jailbroken assumptions, SDK data collection, and biometric flows. 2. For each area give status (OK, Concern, Unknown), the question to verify in code, and the recommended fix. 3. Summarize the five highest-priority actions. 4. Describe how to test network traffic with an intercepting proxy on a test device. OUTPUT FORMAT: Checklist table and the priority list. QUALITY BAR: Test only apps and backends I own or have permission to test. Cite the platform guidance I should read for each Concern, mark items that cannot be judged without running the app on a device, and indicate which findings matter to the app store review. Keep the checklist short enough to use in a sprint review. FOLLOW-UP: Ask me what the app does if the device is offline.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.