Runtime Security Check-wise Recommendations
Overview
This document outlines check-wise runtime security recommendations when integrating Bugsmirror Defender, clearly distinguishing between recommended and optional controls. It is designed to help organizations implement an optimal security configuration based on threats, risk exposure, and UX friction score. Mandatory controls ensure a strong baseline protection against common and advanced threats, while optional features provide additional layers of defence for enhanced security. By following these recommendations, teams can achieve a balanced approach between robust protection, application stability, and operational efficiency.
Security Recommendations Table
| Sr. No. | Security Area | Security Checks | Risk Score on Disable (1-10) | UX Friction Score (1-10) | Final Conclusion |
|---|---|---|---|---|---|
| 1 | Device Integrity | Kernel Level Root Strong Device integrity Custom ROM | 7 | Med (4) | Recommended |
| 2 | Strong device Integrity - Tricky Store Detection | 9 | Low (2) | Mandatory | |
| 3 | Strong device Integrity - Failure in Attestation Process Detection | 9 | Med (4) | Mandatory | |
| 4 | Devices with Expired Certificates Detection (Enabling this will detect old devices and expired certificates. To avoid a huge number of users with this detection, you can consider disabling this) | 3 | High (8) | Not Recommended | |
| 5 | SMS Hooking Prevention | 8 (for UPI) 4 (non-UPI) | Med (4) | Mandatory (for UPI Applications) Not Recommended (for Non-UPI Applications) | |
| 6 | OS Integrity | OEM Unlock | 5 | Med (5) | Optional |
| 7 | ADB Wireless Debugging ADB USB Debugging | 3 | High (7) | Recommended | |
| 8 | Developer Mode Enable Check | 2 | High (8) | Recommended | |
| 9 | Overall Accessibility Permission Detection | 5 | Very High (9) | Optional | |
| 10 | Third Party Accessibility Permission Detection | 7 | Med (5) | Recommended | |
| 11 | Device Lock Enablement | 6 | Low (2) | Optional | |
| 12 | Third Party Location Spoofing detection (On enabling) | 6 | Med(5) | Optional | |
| 13 | Overall Location Spoofing detection | 5 | Very High (9) | Optional | |
| 14 | Active USB Connection Detection | 7 | Med (5) | Recommended | |
| 15 | Secure Communication | Unsecured Wifi Detection | 5 | High (8) | Optional |
| 16 | Proxy Detection Packet Sniffing Detection SSL Pinning API Tampering MitM attack prevention User Installed CA Certificate Detection | 6 | Low (2) | Recommended | |
| 17 | VPN Detection | 4 | High (8) | Recommended | |
| 18 | Mobile Privacy | Screen Shot Prevention | 5 | Med (5) | Optional |
| 19 | Screen Recording Prevention | 5 | Med (5) | Optional | |
| 20 | Screen Share via ADB Prevention | 5 | Med (4) | Optional | |
| 21 | Screen Share by Cast Prevention | 5 | Med (4) | Optional | |
| 22 | Screen Overlay Prevention | 8 | Low (1) | Recommended | |
| 23 | Permanent Unsecure Device Blocking | 5 | Med (4) | Recommended | |
| 24 | Device Screen timeout detection | 3 | Low (3) | Optional | |
| 25 | Mobile Fraud | App Cloning/Second Space Prevention | 6 | Low (2) | Recommended |
| 26 | Keylogger Prevention | 7 | Low (1) | Recommended | |
| 27 | Social Engineering | Marketplace Enforcement Check Apk Sharing | 6 | Med (4) | Recommended |
Disclaimer
We recommend enabling all available security checks to ensure comprehensive protection of your application. However, based on specific application requirements, certain features may be disabled at your discretion.
Please note that disabling any security feature may introduce potential risks and reduce overall protection. Such decisions are solely your responsibility. Bugsmirror shall not be held liable for any vulnerabilities, breaches, or damages resulting from the disabling of recommended features.
This document provides guidance and recommendations only and does not mandate implementation.