Mobile App Security Reports

Run static security analysis for uploaded app versions, then inspect manifest, certificate, code, and network findings in QApilot reports.

Mobile App Security Reports

QApilot can run static security analysis for an uploaded app version when enabled during App Source upload. Security Reports show version-specific manifest, certificate, code, and network findings inside Reports.

A security report is generated only when Security Analysis is enabled. It supplements test execution reporting and does not replace a complete security assessment.

Security Reports

• A new “Security Analysis” checkbox is available in the App Upload flow under Settings → App Source.

• Security analysis runs only when this option is explicitly enabled, ensuring teams stay in control of when and how scans are performed.

• Uploaded app versions include a “View Security Report” option, allowing quick navigation to the corresponding security report for that specific version.

When Clicked on "view report", the security report will be displayed as follows -

• A new Security Reports tab has been added under the Reports section, alongside Accessibility Reports.

• Each security report is listed with key metadata, including app title, OS, package or bundle name, version, analysis duration, and execution status.

• Reports are organized per app version, with a single security report generated for each uploaded version.

• Users can view detailed findings across multiple analysis areas, including:

  • Manifest Analysis

  • Certificate Analysis

  • Code Analysis

  • Network Security