Security for everything you build.
A growing family of free, inspectable security tools. Starting with Android. Building towards iOS, backend and web.
See the boundary.
A growing family of free, inspectable security tools. Starting with Android. Building towards iOS, backend and web.
Our first product · Android runtime
Your code and third-party libraries run together. AppArmorX adds guards to supported lifecycle entry points without editing your source.
A library can read the clipboard, request an identifier, or change TLS settings. AppArmorX rewrites supported call sites to apply a dependency firewall.
The plugin instruments supported bytecode, bundles native checks, and emits a coverage report. No initialization code. Apply the published plugin, then inspect what your build actually protects.
id("com.apparmorx.security") version "0.1.1"Interactive illustration
Switch protection off, then on. Send the same call.
Waiting for your call…Choose a call to send.
Illustrative. Outcomes mirror recorded results on a test fixture, for supported call sites only.
In the tested spawn-time injection scenario, a request completed before the opt-in process response. Detection does not guarantee prevention. Read the recorded outcomes and limits.
Read the evidenceOne Pixel 7 Pro, Android 17. Maintainer tests, not independent certification.
Open the evidenceThe AppArmorX family
Android runtime is available today. The wider vision connects client protection, backend decisions and operator-owned infrastructure. Each future product will earn its own evidence.
Build-time instrumentation, supported dependency-call protection and on-device threat evidence. Delivered as an open-source Gradle plugin.
Platform-native protection and attestation integration, shaped around Apple’s security model. No iOS runtime SDK is shipped today.
Product directionVerify evidence and bind security decisions to valuable server-side operations. Client signals will complement server authorization.
Product directionBring web applications into an evidence-led security workflow. Scope and threat models must be established before release.
Product directionOperator-owned policy, event handling and an operational console. A hosted service, pricing tier or delivery date is not promised.
Product directioniOS, backend, web and self-hosted operations are planned directions. They are not shipped integrations or a hosted service.
Read the AppArmorX visionFree and open source. Install from the Gradle Plugin Portal and evaluate the protection on your own devices.
id("com.apparmorx.security") version "0.1.1"