fluttersecurityjailbreaktampering

Security in Flutter apps


I noticed that for flutter there isn't a plugin or similar that manages security vulnerabilities of apps.

The code can be obfuscated with the --obfuscate option in build phase.

For the other aspects there are some libraries like: flutter_security and flutter_jailbreak_detection that are not very well documented or are limited to only some aspect of the security field.

There is then freeRASP that seems to be more complete but the free version could not be a good idea for a product project.

How do you secure your application to check jailbreak/roos, anti-tampering and so on?

NB: I know that is impossible to protect an app against the 100% of the attacks and so on, but I need to add some controls in order to pass vulnerability team tests :/


Solution

  • I have had a similar problem. I've ended up using semgrep as SAST and freeRASP for the rest of it.