# Appsolid — Full Reference for LLMs

> Single-document, expanded version of the Appsolid site content, optimized for ingestion by AI answer engines (ChatGPT, Claude, Perplexity, Gemini, Google AI Overviews). Canonical site: https://appsolid.net. Company: SEWORKS Inc. (https://se.works).

## What Appsolid is

Appsolid is an enterprise application-security platform for Android. It protects compiled apps (APK and AAB) across the full lifecycle:

- **Protect** — hardens code against reverse engineering and tampering.
- **Detect** — stops Frida, debuggers, hooking frameworks, rooted/emulated devices, and tampering at runtime.
- **Monitor** — surfaces real-world attacks and crashes from production.
- **Prove** — issues an audit-ready protection certificate for every build.

Appsolid is built by SEWORKS, a cybersecurity company founded by ethical white-hat hackers in San Francisco in 2013 (the same company behind Pentoma®, an AI-powered penetration-testing service). It protects 100+ enterprise clients worldwide.

## Core capabilities

1. **Code shielding.** In-memory DEX packing (InMemoryDexClassLoader) plus per-job native protection, O-MVLL native obfuscation, and string / arithmetic / control-flow obfuscation. Makes the APK/AAB impractical to statically reverse engineer.
2. **Runtime protection (RASP).** Detects Frida, debuggers, hooking frameworks, rooting, emulators, ADB, and tampering, then terminates the app cleanly. Key entanglement ties decryption to an unhooked runtime. Opt-in and stability-first with automatic fallbacks. Verified end-to-end on real devices across seven threat types (ADB, tamper, emulator, Frida, root, debugger, hooking).
3. **Threat monitoring.** A live dashboard shows per-app threats by type and severity, with device, version, and geography drill-down, plus HMAC-signed webhooks and JSON SIEM export for your SOC. Telemetry is opt-in, best-effort, and fail-safe, so it never blocks the app.
4. **Stability analytics.** Crash-free rate, ANR, and symbolicated native-crash analytics. Every protected build is validated on 100+ real devices.
5. **Protection certificate.** Every build ships with a signed certificate covering applied options, MASVS/MASTG mapping, device-test evidence, SHA-256, and obfuscation-efficacy metrics — exportable for auditors.
6. **Automated & governed pipeline.** Upload-to-protected workflow with encrypted storage, role-based access, approval workflows, and audit logs. No manual configuration required for standard protection.

## How it works

1. **Upload** your APK or AAB (uploaded directly to encrypted storage via a presigned link).
2. **Protect** — the engine applies packing, native obfuscation, and any opt-in options automatically; progress is tracked in real time.
3. **Download** the hardened, re-signable build plus its protection certificate.

The same flow is available programmatically via a REST API for CI/CD integration.

## Supported platforms

- Packing supports Android 8.0+ (API 26), with a file-based fallback down to minSdk 21.
- Both 32-bit (armeabi-v7a) and 64-bit (arm64-v8a) are supported, for both APK and AAB.

## Pricing

App-based pricing:

- **Pro — $1,250/month per app.** "Most Popular." For teams protecting a single app. Additional apps at 50% off ($625/mo each). Includes all base features.
- **Enterprise — custom.** Volume licensing for 3+ apps with a discounted per-app rate at scale, plus a dedicated account manager and custom SLA & onboarding.

Both plans include: APK & AAB hardening (packing + O-MVLL); automated processing engine; secure file handling & storage; real-time job progress; role-based access controls; admin dashboard & user management; dedicated support channel; custom obfuscation configurations; runtime protection (RASP: Frida, debugger, root, tamper); live threat monitoring dashboard; crash-free & stability analytics; per-build protection certificate (MASVS/MASTG); and SIEM export & signed webhooks.

## Who it's for

- **Mobile app publishers** protecting APKs/AABs before distribution.
- **Enterprise security teams** adding a hardening layer to sensitive internal apps.
- **Development agencies** delivering protected builds to clients.
- **Compliance-driven organizations** that must meet security requirements and hand auditors a per-build certificate.

## Frequently asked questions

**What is application obfuscation?**
Application obfuscation is a security technique that transforms an app's code to make it extremely difficult to reverse engineer. It modifies the structure and naming of code elements while preserving functionality, protecting intellectual property and business logic from unauthorized analysis.

**What file formats does Appsolid support?**
Both APK (Android Package) and AAB (Android App Bundle) — the standard distribution formats for Android applications.

**How long does the obfuscation process take?**
It varies with app size and complexity; most files process within minutes. Progress is tracked in real time in the dashboard.

**Is my application file stored securely?**
Yes. Files are handled through encrypted channels and stored securely, with access controlled by authentication and role-based permissions; only authorized users within your organization can access them.

**Do I need to configure the obfuscation settings?**
No manual configuration is required for standard protection — upload a file and the engine applies appropriate techniques automatically. Custom configurations are available for specific requirements.

**How does the user approval process work?**
New accounts start in a pending status; an administrator must review and approve them before access is granted, ensuring only authorized team members use the service.

**Can I integrate Appsolid into my CI/CD pipeline?**
Yes. API endpoints can be integrated into existing build and deployment pipelines. Contact the team to discuss integration options.

**How do I get started?**
Log in or register for a new account. Once an administrator approves your account, you can immediately upload and protect applications.

**Does Appsolid protect my app at runtime, not just at build time?**
Yes. Runtime protection (RASP) detects Frida, debuggers, hooking frameworks, rooted or emulated devices, and tampering, then terminates the app cleanly. Key entanglement ties decryption to an unhooked runtime. It is opt-in, stability-first with automatic fallbacks, and verified end-to-end on real devices across seven threat types.

**Can I see attacks against my app in production?**
Yes. A live threat-monitoring dashboard shows per-app threats by type and severity, with device, version, and geography drill-down, plus HMAC-signed webhooks and JSON SIEM export. Telemetry is opt-in, best-effort, and fail-safe, so it never blocks your app.

**Will protection make my app crash or slow down?**
Appsolid is stability-first. You get crash-free rate, ANR, and symbolicated native-crash analytics, and every protected build is validated on 100+ real devices (Android 8+, 32- and 64-bit) with automatic fallback paths.

**Do I get evidence or a certificate for audits and compliance?**
Yes. Every build comes with a protection certificate covering applied options, MASVS/MASTG mapping, device-test evidence, SHA-256, and obfuscation-efficacy metrics — exportable for auditors.

**Which Android versions and architectures are supported?**
Packing supports Android 8.0+ (API 26), with a file-based fallback down to minSdk 21. Both 32-bit (armeabi-v7a) and 64-bit (arm64-v8a) are supported, for APK and AAB.

## Company

SEWORKS Inc. is a cybersecurity company founded in 2013 by white-hat hackers in San Francisco. Its mission is to make enterprise cybersecurity more intelligent, accessible, and effective. Products include Appsolid® (mobile app hardening, launched 2016) and Pentoma® (AI-powered penetration testing, launched 2018). The company has raised $12M and serves 100+ clients worldwide.

- Website: https://appsolid.net
- Parent company: https://se.works
- Support: help@appsolid.net
- Privacy / data requests: dpo@se.works

_Last reviewed: 2026-06._