Reference detail
MASVS-AUTH-1 — The app uses secure authentication and authorization protocols.
MASVS-AUTH covers how the app authenticates users and authorizes sensitive actions — largely server-side and runtime, so mostly outside static-analysis scope.
This control requires manual or dynamic review. A static scan cannot establish whether it passes.
Mapped checks & review guidance (2)
Database connection string with credentials
Remove the embedded username:password, rotate the credential, and authenticate to the endpoint with short-lived per-user tokens instead.
Browse this categoryHard-coded credentials in a URL
Remove the embedded username:password, rotate the credential, and authenticate to the endpoint with short-lived per-user tokens instead.
Browse this categoryApps with mapped findings
37 matching apps · Counts below include only this page’s mapped finding types.
Valentines Day Card Maker
com.greetings1.valentinephotoframesBuild 6.0 · 2026-10-07 13:11 UTC1 matching category · 1 matching occurrence
Iowa State Bank Mobile
com.csiweb.digitalbanking.bk0402Build 26.6.1 · 2026-10-07 11:10 UTC1 matching category · 1 matching occurrence
GSSB Mobile Banking
com.csiweb.digitalbanking.bk0475Build 26.6.1 · 2026-10-07 10:22 UTC1 matching category · 1 matching occurrence
Inspire Your Day
com.silvprop.inspireBuild 3.45.0 · 2026-10-07 07:21 UTC1 matching category · 1 matching occurrence
Blackwork Embroidery Creator
com.crochetdesigns.blackstitchcreatorBuild 6.2.7 · 2026-10-07 01:24 UTC1 matching category · 1 matching occurrence
First Resource Bank
com.csiweb.digitalbanking.bk0413Build 26.6.1 · 2026-10-07 00:47 UTC1 matching category · 1 matching occurrence
Frontier Bank
com.csiweb.digitalbanking.bk0231Build 26.6.1 · 2026-10-06 18:28 UTC1 matching category · 1 matching occurrence
Captello
com.leadliaison.captelloBuild 11.21.0 · 2026-10-06 17:20 UTC1 matching category · 1 matching occurrence
S3Drive: Cloud storage
com.s3.drive.file.explorer.storage.cloud.managerBuild 1.18.2 · 2026-10-03 23:15 UTC1 matching category · 2 matching occurrences
Sezzle: Buy Now, Pay Later
com.sezzle.sezzlemobileBuild 5.3.11 · 2026-09-30 19:48 UTC1 matching category · 1 matching occurrence
SeaBank
id.co.bankbkemobile.digitalbankBuild 3.52.4 · 2026-09-30 03:21 UTC1 matching category · 3 matching occurrences
piZap: Design & Edit Photos
com.digitalpalette.pizapBuild 6.8.3 · 2026-09-29 17:18 UTC1 matching category · 1 matching occurrence