iOS Anti-Tampering Detected

Risk: secure

Description

Anti-tampering signals were detected in the iOS application package. This indicates the app performs integrity checks or related runtime validation intended to identify unauthorized modifications to the binary or bundled content.

This is a resilience control rather than a guarantee of security. Anti-tampering can raise the cost of repackaging and patching attacks, but it should still be combined with obfuscation, anti-debugging, jailbreak detection, and strong server-side validation for sensitive decisions.

Recommendation

This entry is informative, no recommendations applicable.

Detect this with Ostorlab

Ostorlab checks Android and iOS apps for this issue.

Scan your app free

Links

• OWASP MASTG - Testing File Integrity Checks (MASTG-TEST-0090)
• OWASP MASVS - MASVS-RESILIENCE-1
• Apple Developer - Establishing your app's integrity

Standards

• OWASP_MASVS_RESILIENCE:
  • MSTG_RESILIENCE_3
• OWASP_MASVS_v2_1:
  • MASVS_RESILIENCE_1
• PCI_STANDARDS:
  • REQ_6_2
  • REQ_6_3
• SOC2_CONTROLS:
  • CC_7_1
  • CC_7_2
• HIPAA_CONTROLS:
  • SECURITY212
  • SECURITY213
• OWASP_MOBILE_TOP_10:
  • M7_2024