Platform

One platform to protect, detect and prove.

Five products that work together from your CI to production, plus Pix Shield for payment flows.

Moatgator Shield

Make reverse engineering expensive.

Attackers start by reading your app. Shield rewrites the compiled app so that logic, endpoints and secrets are far harder to read, change and repackage, without touching your source code.

Code and string obfuscation
Anti-tamper and integrity checks
Mapping files kept for readable crash reports

Explore Shield

Your sourceDecompiled outputShield

class PaymentApi(val http: Http) {
  val base = "pay.example/v1"

  fun send(t: String, m: Money) =
    http.post("$base/send", t, m)
}

public final class a {
  final b f1a;
  final String f2b = c.a("x9F2…");

  final d a(String s, e e2) {
    return f1a.a(c.a(f2b), s, e2);
  }
}

Moatgator Runtime

Detection that lives inside your app.

Root, emulators, debuggers, hooking and tampering are how most mobile fraud starts. Runtime looks for them while the app is running, and your policy decides the response.

Monitor, warn, block or end the session, per detection
Policies versioned in your repo
Every detection starts in monitor mode

Explore Runtime

$app.start com.example.pay 4.12.0 (Android 14)
✓integrity.signature match
✕hook.frida frida-server on 127.0.0.1:27042
✕hook.frida libfrida-gadget.so mapped in process
→policy block → end_session

Session ended

$app.start com.example.pay 4.12.0 (Android 12)
!root.su /system/xbin/su found
!root.manager com.topjohnwu.magisk installed
✕action transfer.confirm requested
→policy warn → block on payment

Transaction blocked

$app.start com.example.pay 4.12.0 (Android 13)
!emulator.qemu ro.kernel.qemu=1
!emulator.build fingerprint contains "generic"
!automation identical touch timing across sessions
→policy warn → report

Reported to Pulse

Moatgator Attest

A verdict your backend can verify.

Attest combines platform integrity signals with Moatgator's own checks and returns a single signed verdict. Your backend verifies the signature and decides whether to continue.

Built on Play Integrity and App Attest signals
Signed verdicts, verified on your side
Decide before a sensitive action runs

Explore Attest

Moatgator Pulse

Security signals, not user content.

Pulse collects security events from protected apps so your team can see attack patterns by app, version and build. It records signals about devices and attempts, never your users' content.

Live event feed per app and build
Alerts to email, Slack and webhooks
Retention that depends on your plan

Explore Pulse

Live events

hook.frida4.12.0 · Android 14Blocked
overlay4.11.3 · Android 13Blocked
root.su4.12.0 · Android 12Warned
emulator4.10.1 · Android 13Warned
tamper4.12.0 · Android 14Blocked
integrity.ok4.12.0 · iOS 17Passed
hook.frida4.12.0 · Android 14Blocked
overlay4.11.3 · Android 13Blocked
root.su4.12.0 · Android 12Warned
emulator4.10.1 · Android 13Warned
tamper4.12.0 · Android 14Blocked
integrity.ok4.12.0 · iOS 17Passed

Moatgator Scan

A first look in minutes.

Scan analyses your app the way an attacker would and maps the findings to OWASP MASVS-RESILIENCE, so you know where you stand and what to fix first.

APK, AAB and IPA, or a store URL
Findings mapped to OWASP MASVS
Fix them with a pull request

Explore Scan

Scan reportapp-release.aab · OWASP MASVSGrade

Pix Shield

Built for apps that move money in Brazil.

Banking trojans in Brazil rely on tricking the customer on their own device. Pix Shield detects those techniques at the moment of payment and can stop the transaction before it leaves the account.

Overlay and accessibility-service abuse
Screen capture and recording, with content hiding
Active remote access, with transaction blocking
Ready-made policies for payment screens

Explore Pix Shield