Reference detail

MASVS-AUTH-3 — The app secures sensitive operations with additional authentication.

MASVS-AUTH covers how the app authenticates users and authorizes sensitive actions — largely server-side and runtime, so mostly outside static-analysis scope.

This control requires manual or dynamic review. A static scan cannot establish whether it passes.

Outside static-analysis scope

No app list is inferred from missing evidence for this control.