Hey Skip, thank you for your insights on how to make Apps/APIs more secure.

Hi impmja, thanks for your kind words. I plan to keep writing on mobile api security, api management, and other related topics.

Our approov product is a cloud-based service. A small SDK is added to your app which is registered with our service when the app is deployed. I don’t want to push our product too hard in this forum; if you contact me here, I would be glad to go into whatever depth you like.

If you prefer to try it yourself, you can download our fully working demo or you can work through my hands-on api proxy article which shows how to remove secrets from an android app and lock things down with approov.

I look forward to speaking with you or anyone else who wants more information.