{
  "app": {
    "app_id": "game.revani.racemaxpro",
    "title": "Race Max Pro - Car Racing Game",
    "version": "2.17.6"
  },
  "scan": {
    "scan_id": "cc4c39a4-435c-495d-b5cc-0f69a4dfb33e",
    "grade": "A",
    "score": 92,
    "scanned_at": "2026-10-08T17:59:22.717Z"
  },
  "analysis": {
    "issues": [],
    "stages": {
      "pii": "complete",
      "sbom": "complete",
      "signing": "certificate_parsed",
      "strings": "complete",
      "manifest": "complete"
    },
    "status": "complete",
    "grading": {
      "policy": "static-coverage-v1",
      "blockers": [],
      "eligible": true
    },
    "timings_ms": {
      "total": 117827.812,
      "harvest": 62307.83400000001,
      "detectors": 45028.13200000024
    },
    "bytes_total": 1231037537,
    "bytes_scanned": 1231037537,
    "bytes_skipped": 0,
    "files_processed": 9171,
    "coverage_version": 2,
    "string_encodings": [
      "ascii",
      "utf16le"
    ],
    "signature_validation": "not_performed"
  },
  "provenance": {
    "mode": "static",
    "artifacts": [
      {
        "name": "base.apk",
        "sha256": "3c9ff179d7aeede879d2f5f34ec80841808596bdac4417409c2c67cf2f0330dc"
      },
      {
        "name": "avatars_assets_all.apk",
        "sha256": "7c1029719a5a9ae90191ded46ca9ea0017b552101c2a3638a3a2ceed6e4f34ca"
      },
      {
        "name": "bossimageslarge_assets_all.apk",
        "sha256": "2be3dda80ad3e0dc726596400ea1ec7e697a3cb8fef6ba48aef4f5600f27cc1e"
      },
      {
        "name": "bossimagesmedium_assets_all.apk",
        "sha256": "d120c8ddcb9bcb044889d9f789ccddc869394a5a6b4876a0e55846a1c394d9c3"
      },
      {
        "name": "bossimagesraceicons_assets_all.apk",
        "sha256": "7f7ebe4d7099785991b9239ad0e672b153fa9e51eb5da5f0556c49ba19c286cf"
      },
      {
        "name": "bossimagessmall_assets_all.apk",
        "sha256": "94d71092f3a7bbbf2de7a7d3090e191ad197b53e741c66fda932c70de4527afa"
      },
      {
        "name": "chapters_assets_all.apk",
        "sha256": "a28d9ce9768e52aeaf731b2ac8644a8ec59ac7ff3d7fd8a3ac8d3113845216ea"
      },
      {
        "name": "config.arm64_v8a.apk",
        "sha256": "71aeb4b6a12ee1116bad7a9c2d6963783ee79a976a58a4537418a8a56d2fbe4f"
      },
      {
        "name": "customizationpreviewimages_assets_all.apk",
        "sha256": "920ef1d6e07fc937d663100fd15e12ceb7984840b7d4865b5e04d8302a64582f"
      },
      {
        "name": "decals_assets_all.apk",
        "sha256": "c21e307c9192f4ef077a7c3a101711b3945fc000a609e0a9143c8f8acdb88dda"
      },
      {
        "name": "defaultlocalgroup_assets_all.apk",
        "sha256": "174d84f61cd823ffe1a1095b4a59ca57f668a2119b46e96ff5a354935722c7c7"
      },
      {
        "name": "defaultlocalgroup_scenes_all.apk",
        "sha256": "10c5cb8061e56ad141c162b2de9abd654882a70e0bb5feaab2b4ab4d5c0b15b7"
      },
      {
        "name": "duplicateassetisolation_assets_all.apk",
        "sha256": "8196005b307c6efb2a66ae6e58470fa997026645efbe0af74564f0b16090a796"
      },
      {
        "name": "duplicateshaderisolation_assets_all.apk",
        "sha256": "f9d5dd2f50ea0d87e535fe4b1862ddbbca16bbfe7de4d1a2a71a804182eeaefd"
      },
      {
        "name": "events_assets_all.apk",
        "sha256": "596110790c51b3ebd153530b3d273a64cde70ee0663676c459b2f6c791396b45"
      },
      {
        "name": "offers_assets_all.apk",
        "sha256": "88738ff21608346ff89f371f8860ef3e1f152b5c6b3855c7e104aba846801fd5"
      },
      {
        "name": "plates_assets_all.apk",
        "sha256": "241d480d0905069adc9e6784d1b3fd8965b2630de5d3424a99f5d08b7990d6a3"
      },
      {
        "name": "playercars_assets_all.apk",
        "sha256": "8b572f060f6f5ee6a72ca3e92baacde91b9470b94464c9b97414353a4c7ab0d9"
      },
      {
        "name": "rims_assets_all.apk",
        "sha256": "560365b2815e9d28a8559f54fbc48d1b953a1076629ac6939fa967cbf34f1d29"
      },
      {
        "name": "scenesfirstbundle_assets_all.apk",
        "sha256": "adf1c719c35174367600c7f26bb663e5ccddf0ab94e6e52c46763b03ec868dea"
      },
      {
        "name": "scenesracetrackatracks_assets_all.apk",
        "sha256": "1ed1ccfa77433abf907d28d0fe217b210571d1977ec5e74951b62ad48dbece09"
      },
      {
        "name": "scenesracetrackbtracks_assets_all.apk",
        "sha256": "d4c19b7bc0e43b1589307a307afb6bc5d3b3037b320a03e2ea50bdaf841da945"
      },
      {
        "name": "scenesracetrackctracks_assets_all.apk",
        "sha256": "a418ad430e0c0ffc64f9e1edaa33df53c3c27ab2cad959f2f410b51eb50cd7aa"
      },
      {
        "name": "scenesracetrackdtracks_assets_all.apk",
        "sha256": "32ce6e2056fff783b0f8aada30da26a9fe715b50c283e9d0fb6b539d42859ee9"
      },
      {
        "name": "scenesracetracketracks_assets_all.apk",
        "sha256": "41cba62ff51b3c1a13814727f3ea3220cf099fbd1b10b7400145e9313bba9f6c"
      },
      {
        "name": "seasonpass_assets_all.apk",
        "sha256": "1e0b6a9e71bf3b383dcc42ffe493a369b7339ded1af6f7d3dfd4b2749ae4a788"
      },
      {
        "name": "spoilers_assets_all.apk",
        "sha256": "359b073137ab972f77038027f8658d88bb820b94ea6a37f4012c042e4961ff68"
      }
    ],
    "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
  },
  "apk_sha256": "3c9ff179d7aeede879d2f5f34ec80841808596bdac4417409c2c67cf2f0330dc",
  "schema": "apk-scanner.coverage/v1",
  "framework": "OWASP MASVS v2",
  "disclaimer": "Static, metadata-only analysis. Each control is scored evidence-for / gap-signal / requires-manual-testing. This is evidence toward a MASVS assessment, NOT a certification — apk-scanner.com is not an authorized assessment lab. Absence of a static finding does not prove a control passes.",
  "rows": [
    {
      "control": "MASVS-STORAGE-1",
      "category": "STORAGE",
      "title": "The app securely stores sensitive data.",
      "static": "partial",
      "status": "gap-detected",
      "count": 1,
      "findings": [
        {
          "finding_type": 20,
          "key": "google_api_key",
          "title": "Google API key (client-shipped; restriction unverified)",
          "severity": "low",
          "verified": false,
          "relationship": "gap-signal",
          "cwe": [
            798
          ]
        }
      ]
    },
    {
      "control": "MASVS-STORAGE-2",
      "category": "STORAGE",
      "title": "The app prevents leakage of sensitive data.",
      "static": "partial",
      "status": "gap-detected",
      "count": 1,
      "findings": [
        {
          "finding_type": 53,
          "key": "firebase_storage",
          "title": "Firebase Storage bucket reference",
          "severity": "low",
          "verified": false,
          "relationship": "gap-signal",
          "cwe": [
            200,
            284
          ]
        }
      ]
    },
    {
      "control": "MASVS-CRYPTO-1",
      "category": "CRYPTO",
      "title": "The app employs current strong cryptography and uses it according to best practices.",
      "static": "partial",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-CRYPTO-2",
      "category": "CRYPTO",
      "title": "The app performs key management according to best practices.",
      "static": "partial",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-AUTH-1",
      "category": "AUTH",
      "title": "The app uses secure authentication and authorization protocols.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-AUTH-2",
      "category": "AUTH",
      "title": "The app performs local authentication securely.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-AUTH-3",
      "category": "AUTH",
      "title": "The app secures sensitive operations with additional authentication.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-NETWORK-1",
      "category": "NETWORK",
      "title": "The app secures all network traffic according to current best practices.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-NETWORK-2",
      "category": "NETWORK",
      "title": "The app verifies the identity of the remote endpoint (e.g. certificate pinning).",
      "static": "partial",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PLATFORM-1",
      "category": "PLATFORM",
      "title": "The app uses IPC mechanisms securely.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PLATFORM-2",
      "category": "PLATFORM",
      "title": "The app uses WebViews securely.",
      "static": "partial",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PLATFORM-3",
      "category": "PLATFORM",
      "title": "The app uses the user interface securely.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-CODE-1",
      "category": "CODE",
      "title": "The app requires an up-to-date platform version.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-CODE-2",
      "category": "CODE",
      "title": "The app has a mechanism for enforcing updates.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-CODE-3",
      "category": "CODE",
      "title": "The app only uses software components without known vulnerabilities.",
      "static": "yes",
      "status": "gap-detected",
      "count": 1,
      "findings": [
        {
          "finding_type": 62,
          "key": "sbom_cve",
          "title": "com.squareup.okhttp3:okhttp 3.12.13 — CVE-2021-0341",
          "severity": "medium",
          "verified": false,
          "relationship": "gap-signal",
          "cwe": [
            937,
            1104
          ]
        }
      ]
    },
    {
      "control": "MASVS-CODE-4",
      "category": "CODE",
      "title": "The app validates and sanitizes all untrusted inputs and follows secure-coding practice.",
      "static": "partial",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-RESILIENCE-1",
      "category": "RESILIENCE",
      "title": "The app validates the integrity of the platform.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-RESILIENCE-2",
      "category": "RESILIENCE",
      "title": "The app implements anti-tampering mechanisms.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-RESILIENCE-3",
      "category": "RESILIENCE",
      "title": "The app implements anti-static-analysis mechanisms.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-RESILIENCE-4",
      "category": "RESILIENCE",
      "title": "The app implements anti-dynamic-analysis techniques.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PRIVACY-1",
      "category": "PRIVACY",
      "title": "The app minimizes access to sensitive data and resources.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PRIVACY-2",
      "category": "PRIVACY",
      "title": "The app prevents identification of the user.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PRIVACY-3",
      "category": "PRIVACY",
      "title": "The app is transparent about data collection and usage.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PRIVACY-4",
      "category": "PRIVACY",
      "title": "The app offers user control over their data.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    }
  ],
  "categories": [
    {
      "category": "STORAGE",
      "controls": 2,
      "gaps": 2,
      "verified": 0,
      "manual": 0
    },
    {
      "category": "CRYPTO",
      "controls": 2,
      "gaps": 0,
      "verified": 0,
      "manual": 0
    },
    {
      "category": "AUTH",
      "controls": 3,
      "gaps": 0,
      "verified": 0,
      "manual": 3
    },
    {
      "category": "NETWORK",
      "controls": 2,
      "gaps": 0,
      "verified": 0,
      "manual": 0
    },
    {
      "category": "PLATFORM",
      "controls": 3,
      "gaps": 0,
      "verified": 0,
      "manual": 1
    },
    {
      "category": "CODE",
      "controls": 4,
      "gaps": 1,
      "verified": 0,
      "manual": 1
    },
    {
      "category": "RESILIENCE",
      "controls": 4,
      "gaps": 0,
      "verified": 0,
      "manual": 4
    },
    {
      "category": "PRIVACY",
      "controls": 4,
      "gaps": 0,
      "verified": 0,
      "manual": 1
    }
  ]
}