Skip to content

Our first product · Android runtime

Your app, as you built it.

Your code and third-party libraries run together. AppArmorX adds guards to supported lifecycle entry points without editing your source.

Keep supported library calls in check.

A library can read the clipboard, request an identifier, or change TLS settings. AppArmorX rewrites supported call sites to apply a dependency firewall.

One line. Woven in at build time.

The plugin instruments supported bytecode, bundles native checks, and emits a coverage report. No initialization code. Apply the published plugin, then inspect what your build actually protects.

app/build.gradle.kts
id("com.apparmorx.security") version "0.1.1"

Interactive illustration

Same call.
Different outcome.

Switch protection off, then on. Send the same call.

Choose a library callWaiting for your call…

Choose a call to send.

Illustrative. Outcomes mirror recorded results on a test fixture, for supported call sites only.

Know the edge.

In the tested spawn-time injection scenario, a request completed before the opt-in process response. Detection does not guarantee prevention. Read the recorded outcomes and limits.

Read the evidence

21 of 21 device tests passed.

One Pixel 7 Pro, Android 17. Maintainer tests, not independent certification.

Open the evidence

The AppArmorX family

Focused products.
One security purpose.

Android runtime is available today. The wider vision connects client protection, backend decisions and operator-owned infrastructure. Each future product will earn its own evidence.

Available · 0.1.1Android

Android runtime

Build-time instrumentation, supported dependency-call protection and on-device threat evidence. Delivered as an open-source Gradle plugin.

PlannediOS

iOS protection

Platform-native protection and attestation integration, shaped around Apple’s security model. No iOS runtime SDK is shipped today.

Product direction
PlannedBackend & APIs

Backend verification

Verify evidence and bind security decisions to valuable server-side operations. Client signals will complement server authorization.

Product direction
PlannedWeb

Web integration

Bring web applications into an evidence-led security workflow. Scope and threat models must be established before release.

Product direction
PlannedPolicy & events

Self-hosted operations

Operator-owned policy, event handling and an operational console. A hosted service, pricing tier or delivery date is not promised.

Product direction

iOS, backend, web and self-hosted operations are planned directions. They are not shipped integrations or a hosted service.

Read the AppArmorX vision

Evaluate it on your own app.

Free and open source. Install from the Gradle Plugin Portal and evaluate the protection on your own devices.

app/build.gradle.kts
id("com.apparmorx.security") version "0.1.1"