What all vulnerabilities in android code do you guys detect? Do you have statistics of security issues etc people using Appknox have, like what are most common mistakes, safe libraries etc?
@pjuvatkar We detect code level issues around misconfigurations and test for around 30 different test cases. We do not record issues they resolve but just record number of times any developer triggers scanning or correction. We already have stats around safe libraries and all from our automated binary scanner that has scanned 50K plus apps and use learning from it as a suggestion in DevKnox.
@pjuvatkar Thank you for checking us out. Our roadmap at Devknox certainly has those features in our upcoming releases including if there is an updated version of the SDKs been used and auto suggestions for performance based issues.
@pjuvatkar@harshit_agarwal we have a check to find vulnerabilities only in writable *.java and *.xml files.
Which means, if you are importing a 3rd party jar library to your project, we suppress our findings, since it is not writable, but if you are including a library via source code in classpath, then we find and auto-fix those !
Report
Maker
Hello Product Hunters!
We are excited to have Devknox on Product Hunt! After spending close to two years on our mobile security solution for businesses, we’ve realised the need for something easier for developers to take care of security as they build apps.
Devknox is a slick and handy security plugin for Android Studio enabling developers like you to detect and resolve security issues as you write code. Devknox suggests you security fixes on the go which you can take care of in just a few clicks. It is as easy as spellcheck or autocorrect.
Try it out and let us know what you think.
Report
@prateekpanda Awesome product! Just one question - Does Devknox parse the code offline or do you send the code to your servers?
Report
Maker
@mrdhat All of the tests and security analysis are done offline, locally on your machine. Nothing goes to our servers so you can rest assured your code is not leaving your machine :)
@mrdhat@prateekpanda We only connect online to update the plugin and to authenticate the user. I would suggest you to update the plugin whenever there is an update
Report
@subho_halder@prateekpanda Great! Always wondered this while using the private beta.
I just shared this with my team and everyone is thrilled to use it!
Best of luck! :)
Report
Maker
@mrdhat Thank you for trying out Devknox. Looking forward to your team's feedback in the days ahead.
@keyul exactly, that is why we built devknox. I hope you liked it. Do share it with your developer friends and give us feedback to make it more awesome :)
@nivo0o0 Thank you for checking us out. Even though you may not speak code, I'm sure you are a great storyteller. Do share Devknox with your developer friends. :)
Nanonets
Devknox
Devknox
Nanonets
Devknox
Devknox
ArtSquare
Devknox
Quick Code
Devknox
VC Puzzle
Devknox