APK Binary Hardening Analyzer
PIE, NX, stack canary, RELRO on .so files. Part of AuditCore's automated security audit pipeline — runs on every scan in the Enterprise tier and above, with findings normalized into a single severity-rated table.
What is APK Binary Hardening Analyzer?
APK Binary Hardening Analyzer runs in the Static / Code & Mobile phase of every AuditCore scan that includes it. Source-code, dependency and mobile-binary analysis — Semgrep rules, gitleaks secrets, Trivy CVEs, APK / IPA manifest, permissions, strings, network and native-binary hardening.
Out of the box it covers: PIE, NX, stack canary, RELRO on .so files. Findings are normalized into AuditCore's vulnerability model so they appear next to results from every other scanner — no separate tabs, no tool-specific jargon, one CVSS-rated table.
If you've ever wondered which scanners actually run when you click "Start scan" on AuditCore, this is one of them. The full pipeline is documented per phase, and you can see exactly which tools fired on any given scan from the live terminal feed.
What it tests
- PIE, NX, stack canary, RELRO on .so files
- Runs automatically as part of any Enterprise-tier scan and above
- Findings appear in the standard AuditCore severity table (Critical / High / Medium / Low / Info)
- Results are bundled into the PDF report and exposed via the API
Where it runs in the AuditCore pipeline
Phase 5/5 · Static / Code & Mobile
Source-code, dependency and mobile-binary analysis — Semgrep rules, gitleaks secrets, Trivy CVEs, APK / IPA manifest, permissions, strings, network and native-binary hardening.
Source: scanners/mobile/apk_binary_analyzer.py
Sample findings
APK Binary Hardening Analyzer fired on a real target
Typical run produces between 0 and dozens of normalized findings depending on the target's posture. Each finding includes severity, evidence, affected URL/parameter, and a remediation hint.
Other static / code & mobile scanners
FAQ
What does APK Binary Hardening Analyzer test for?
PIE, NX, stack canary, RELRO on .so files
Which AuditCore plan includes APK Binary Hardening Analyzer?
Available from the Enterprise plan ($499) and up. Higher tiers also include this scanner — license once, rescan unlimited.
Is APK Binary Hardening Analyzer safe to run on production?
Yes — APK Binary Hardening Analyzer runs in the Static / Code & Mobile phase, which is non-intrusive. It only reads data the target already exposes (DNS, HTTP responses, public files, headers).
Where does APK Binary Hardening Analyzer run in the AuditCore scan pipeline?
Phase 5/5 — Static / Code & Mobile. Source-code, dependency and mobile-binary analysis — Semgrep rules, gitleaks secrets, Trivy CVEs, APK / IPA manifest, permissions, strings, network and native-binary hardening.
Can I rerun APK Binary Hardening Analyzer without paying again?
Yes. AuditCore uses a per-domain license model — once you've purchased a tier for a domain, every rescan (manual or scheduled) is included. No metered usage.