guardianMOBILE RELEASE ANALYSISDownload
Menu
FREE FOR macOS · RUNS LOCALLY

Find mobile release blockers
before your users do.

Guardian reviews iOS, Android and Flutter projects for security risks and release-compliance gaps, on your Mac, without uploading your source code.

Download for macOS See an example report
  • No repository upload
  • Runs offline
  • iOS · Android · Flutter
GUARDIAN / RELEASE REVIEW
PROJECT DETECTED

Atlas Mobile

Flutter · iOS · Android

Local only
RELEASE GATE

Hold for review

2 blockers need your attention

08/10Analyzers completed
02Release blockers
06Total findings
ANALYSIS COVERAGESTATUS
Security analysis1 blocker
Release compliance1 blocker
QA evidenceIncomplete
Source stays in your environment.
Sample data — not a real project.
WHAT GUARDIAN CHECKS

Three questions,
answered before you ship.

In the CLI today

Security analysis

Catch the security problems that stop a release, while they are still cheap to fix.

What Guardian checks

  • Insecure transport configuration. Release configuration that permits cleartext traffic beyond a documented exception, on Android and iOS.
  • Source and configuration risk indicators. Risk patterns in project source and platform configuration across iOS, Android and Flutter.
  • Binary, dynamic and SBOM analysis groups. The CLI ships dedicated command groups for binary analysis, dynamic analysis and SBOM generation.
Preview

Mobile release compliance

Know the store and platform requirements are met before you upload the build.

What Guardian checks

  • Missing privacy purpose declarations. Privacy-sensitive capabilities represented in iOS release metadata without corresponding purpose text.
  • Release configuration and store-readiness evidence. Platform release settings and the evidence a store submission expects to find.
  • Missing QA evidence stays visible. Test results that were never supplied are reported as incomplete coverage. They never quietly become a pass.
In the CLI today

Release gate and reporting

Turn findings into a release decision that you can explain to someone else.

What Guardian checks

  • A release check you can run in CI. guardian release check runs the release workflow and exits on the configured policy.
  • Reports in the format your pipeline reads. guardian scan --format text, json, sarif, gitlab or html, written to a file with --output.
  • Compare against a baseline. --baseline with --fail-on-new blocks on newly introduced findings instead of on your existing backlog.

Every check, with its platform and limits, is in the checks catalogue

EXAMPLE OUTPUT

What a review
actually tells you.

Atlas Mobile (example) · Flutter · iOS · Android

Risk in the source and configuration, plus what arrived from outside your own code.

1 release blocker
SEC-001HighRelease blocker

Cleartext traffic permitted

Android · application configuration

The synthetic release configuration permits cleartext traffic beyond a documented exception.

Restrict release network policy to encrypted transport; document any narrowly scoped exception and re-run the check.

DEP-004Medium

Dependency constraint is broad

Shared · dependency declaration

A sample dependency allows changes beyond the documented review range. No vulnerability claim is made.

Review and constrain the accepted version range; update and retain the lockfile.

What the store and the platform expect to find before the build is accepted.

1 release blocker
REL-002HighRelease blocker

Privacy purpose declaration missing

iOS · release metadata

A privacy-sensitive feature is represented without corresponding purpose text in the sample release metadata.

Review the feature and add accurate purpose text where required. Validate the final release configuration against current platform requirements.

CI-005Medium

Test evidence is not attached to the gate

CI/CD · sample pipeline

The sample pipeline does not supply test results to the release policy evaluation.

Attach the relevant test artifact and require explicit handling of missing evidence.

The decision, and the findings, coverage and policy that produced it.

Hold for review
SEC-001HighRelease blocker

Cleartext traffic permitted

Android · application configuration

The synthetic release configuration permits cleartext traffic beyond a documented exception.

Restrict release network policy to encrypted transport; document any narrowly scoped exception and re-run the check.

REL-002HighRelease blocker

Privacy purpose declaration missing

iOS · release metadata

A privacy-sensitive feature is represented without corresponding purpose text in the sample release metadata.

Review the feature and add accurate purpose text where required. Validate the final release configuration against current platform requirements.

Why the gate is holding

  • Two high-severity findings are marked as release blockers by the configured policy.
  • One check reported incomplete coverage, and one did not run at all.
  • Incomplete coverage is never counted as a pass, so the gate holds rather than clearing.

Sample data — not a real project.

YOUR CODE STAYS PUT

Keep your code close.
Keep the choice yours.

Local analysis trust boundary

YOUR ENVIRONMENT PRIVATE BOUNDARY

Private project

Source · builds · secrets

Guardian local engine

Analysis · coverage · policy

Local findings & reports

Inspect · fix · re-run

A local scan completes without a network connection.

Read the security model
QUICK ANSWERS

Short answers.

Do I need to upload my repository?

No. Guardian analyses a project folder on your Mac. There is no upload step in a scan.

Does it work offline?

Yes. Scans run locally. Vulnerability data is only as fresh as the data you have on your machine.

What does it cost?

Guardian is free to download and use under its licence. It runs on Apple-silicon Macs with macOS 15 or later.

Does a passing gate mean my app is safe?

No. The result depends on the checks that ran and the policy you set. Missing coverage stays visible, and engineering judgement is still required.

FREE FOR macOS

Make the next release
an informed decision.

Download Guardian and scan your first project in minutes.

Download for macOS