Risk engine
Maps detections such as Frida, hooking, root, overlay, and virtual device to LOG, WARN, CLOSE, or BLOCK.
AI security
AI-native risk and attestation
Severity, action, and end-user copy are policy — not hardcoded in the mobile SDK. ThreatDesk scores the 44/23 rule catalog per environment.
Cloud attestation
ATS Lite for routine APIs and ATS Full for payments. Token-in-body is rejected. A clean token cannot override BLOCK.
Isolated catalogs
Super Admin defaults copy into Client Sandbox and Production only after that environment is enabled.
Fraud signals
FraudWatch feeds overlay, accessibility takeover, and UPI risk flags into the same launch score.
SDK integrity
SDKGuard watches payment and analytics libraries without putting secrets in JavaScript.
Identity beside the token
BindDefender and MFADefender re-check the handset and SIM on launch and on ATS Full routes.