Everything you need to know about CheckAppSec
All uploaded files and analysis results are automatically deleted after 2 hours. You can also delete your data immediately using the 'Delete Now' button on the results page.
Yes, absolutely. Each analysis is protected by a unique session token that's only stored in your browser. Only you can access your results, and even we cannot view them without your token.
No. We do not create any copies, backups, or archives of your applications. Files are stored temporarily during analysis only and are permanently deleted afterward.
Our static analysis scans for: insecure data storage, hardcoded secrets (API keys, passwords), weak encryption, dangerous permissions, code injection vulnerabilities, insecure network communication, and more.
No. You should only analyze applications you own or have explicit permission to test. Unauthorized analysis may violate laws and our Terms of Service.
Our static analysis tools detect many common security issues, but they are not 100% comprehensive. We recommend combining our results with manual code review and dynamic testing for complete security assessment.
We support IPA files up to 500MB. Larger enterprise applications may need to be split or analyzed in parts.
No. We do not use cookies, tracking pixels, analytics scripts, or any third-party tracking technologies. Your activity on our site is completely private.
Yes! Our zero-retention policy makes us suitable for analyzing proprietary and confidential applications. Many security teams use our service for in-house app testing.
After 2 hours, all data associated with your analysis (uploaded file, scan results, session tokens) is permanently deleted from our servers. The analysis ID becomes invalid and cannot be recovered.
Yes. Our data minimization approach (automatic deletion, no user accounts, no tracking) exceeds the requirements of GDPR, CCPA, and similar privacy regulations.
No. Results are tied to the session token stored in your browser. This is a security feature to prevent unauthorized access. You must access results from the same browser that uploaded the file.
If analysis fails, you'll see an error message with details. The uploaded file is still automatically deleted. You can try uploading again. If problems persist, contact support@checkappsec.com
Currently, we only support iOS IPA files. Android APK analysis is planned for a future release.
Not yet, but we're considering an enterprise API for CI/CD pipeline integration. Contact us if you're interested in early access.
We take security seriously. Please report any vulnerabilities to security@checkappsec.com. We'll respond within 24 hours.
We're here to help! Reach out to our support team.