Security and Performance Evaluation for an Innovative Mobile Application

1. Situation

The client is a company developing a mobile application where brands launch challenges to users in exchange for monetary rewards. The challenges are segmented by location, type, and reward, requiring high reliability and security for the data being managed.

The objective was to evaluate the application's codebase and establish a baseline to monitor development and security improvements over time.

2. Problem

Risks were identified related to:

• Security of the business logic on both the client and server sides.
• Lack of metrics to evaluate future application versions.
• Vulnerabilities in the exposed API and user interface.

3. Solution

A comprehensive source code analysis was conducted, focusing on critical aspects:

• Analysis of business logic on the client and server sides.
• Review of vulnerabilities in the API and user interface.
• Creation of baseline metrics for future comparisons.

4. Result

The analysis enabled the identification and prioritization of critical issues, resulting in:

• Fixing severe vulnerabilities detected in the client and server.
• Release of a more secure and reliable version of the application.
• Increased confidence in future development with the implementation of baseline metrics.