MASH | Singapore Government Developer Portal
overview
Overview
Features & Roadmap
Getting Started
Resources
FAQs

MASH

Mobile Application Security Hygiene (MASH) is a Static Application Security Testing (SAST) tool that detects vulnerabilities and exposures in mobile apps. It extracts and analyses content from iOS (.ipa) and Android (.apk) files to uncover risks like hardcoded secrets and sensitive data leaks.

Key Benefits

Improve mobile application security posture

MASH helps improve your mobile application security posture by aligning with the Open Web Application Security Project (OWASP) Mobile Application Security Testing Guide (MASTG) recommended by IM8

Expand vulnerability detection capabilities

MASH complements existing SAST tools and detects vulnerabilities beyond conventional SAST analysers by looking at information after the code compilation process.

Easy access to prioritised findings

MASH completed scan results are automatically displayed in the MASH dashboard with an export option to pdf for easy reference.

Was this article useful?

A SAST Tool That Analyses iOS and Android Files to Uncover Vunerabilities and Data Exposures.