Secure Communication
SSL / Certificate Pinning
Protect pins your API's certificate (SPKI hash) at the native layer, independent of the OS trust store. Even a device with a malicious CA installed — the standard setup for MITM proxy tools and SSL pinning bypass frameworks — can't get between your app and your backend without the connection failing.
How it works
- Per-client pin sets, generated and managed through the Protect portal.
- Pin data is obfuscated in the shipped asset, not stored as a plain, greppable string.
- Native TLS client (mbedTLS-based) rather than relying solely on platform HTTP stacks.
Where this matters most
Ready to harden your Android app?
Talk to us about integrating Protect — we'll walk through your app's threat model and scope the integration.