Before a release
Source and artifact review
Compare declared configuration with supported packaged-artifact evidence. Review exposure indicators and understand the limits of source-to-artifact correlation.
Use cases
For the people accountable for a release.
Practical workflows for engineering and security teams evaluating application risk.
During a security review
Evidence-backed findings
Use structured evidence, severity, confidence, and remediation context to investigate a finding. Keep exceptions visible through baselines and suppressions.
Inside a delivery workflow
Policy and reporting
Bring JSON and SARIF into compatible tools. Evaluate policy thresholds with a repeatable CLI workflow rather than interpreting a dashboard screenshot.
On an Android device
Separate runtime evaluation
Evaluate the Android engine in a controlled app and device setup. Test supported firewall behavior and threat evidence before choosing release response policies.