Protect your app from every angle
Veil is a Runtime Application Self-Protection SDK for Android and iOS. Detect root, jailbreak, dynamic hooking, tampering, overlay attacks, and 20+ more attack vectors — in real time, with 3 lines of code.
Simulate a real mobile attack vector and watch Veil intercept it in memory:
Dynamic Hooking Attack
Active In-Memory Anti-Hooking Shield neutralized runtime method tampering.
Autonomous Threat Defense Verdict
In-Memory Anti-Hooking & Runtime Self-Protection
Real-time detection of unauthorized dynamic function hooks and reverse engineering frameworks.
{
"event": "THREAT_NEUTRALIZED",
"threatCategory": "RUNTIME_HOOKING",
"severity": "CRITICAL",
"riskScore": 95,
"latency": "2.3ms",
"policy": "BLOCK_TRANSACTION",
"status": "PROTECTED"
}Every platform. One SDK.
Native SDKs with zero performance overhead. Bridges available for cross-platform frameworks.
Android
Native AAR / Gradle
iOS
XCFramework / SPM
Flutter
Native Flutter Plugin
React Native
TurboModule Bridge
Capacitor
Enterprise Plugin
Every attack vector your app faces. Covered.
Mobile apps are attacked at every layer — from the device they run on to the network they talk over. Veil monitors all of it, continuously, with zero impact on app performance.
Device Compromise
Rooted and jailbroken devices operate outside OS security boundaries — giving attackers full control over your app's runtime environment.
"Bypasses every in-app security control you have built."
Runtime Attacks
Instrumentation and hooking tools let attackers intercept every function call, extract API keys, clone sessions, and manipulate your business logic live.
"Credentials stolen in transit. Logic reversed. Nothing is private."
App Integrity
Tampered or repackaged versions of your app distributed outside official stores — with malware injected, paywalls removed, or analytics stripped.
"Your brand. Your users. Someone else's code."
Network & Data Threats
Traffic interception, fake GPS coordinates, and live screen capture that expose your users' data and silently bypass your fraud detection systems.
"Transactions manipulated. User data exposed. Compliance at risk."
Curious what's hitting your app right now?
Book a demo and we'll show you live threat data from apps in your industry.
More than detection
A complete security platform — from SDK to dashboard to enforcement.
Real-time Threat Feed
Live SSE stream pushes every threat event to your dashboard the moment it's detected. Zero polling.
Webhook Alerts
HMAC-SHA256 signed webhooks fire on configurable risk thresholds. Integrate with PagerDuty, Slack, or your SIEM.
Remote Kill Switch
Block any device fingerprint instantly from the dashboard. The next scan silently locks out the device.
Force Update Enforcement
Set a minimum app version server-side. Outdated apps are blocked on the next scan — no re-deployment needed.
Server-side Attestation
Play Integrity, SafetyNet (legacy), and App Attest verdicts are verified server-side — not just client-side.
Certificate Pinning
SHA-256 public key pinning on both platforms. Prevents MitM attacks even on proxied corporate networks.
Compliance Reports
One-call generateComplianceReport() returns a structured JSON map ready for PCI-DSS and SOC 2 audits.
Multi-tenant Dashboard
Separate organisations, apps, API keys, and analytics per company. RBAC with super-admin, org-admin, viewer roles.
Engineered for strict banking & fintech compliance
Designed from day one to fulfill global cybersecurity mandates and audit frameworks.
Full MASVS-RESILIENCE mapping against reverse engineering and tampering.
Meets Master Direction mandates on app tampering, mock GPS & debug detection.
Continuous in-memory threat monitoring and cryptographic certificate pinning.
Only anonymized hardware telemetry collected. 100% GDPR & DPDP Act compliant.
Server-side attestation. Not just client-side.
Play Integrity (Android), SafetyNet legacy, and Apple App Attest tokens are verified against Google and Apple's servers — so a rooted device can't forge the verdict locally.
Integrate in minutes, not weeks
One dependency. One initialization call. Full protection.
// 1. Add dependency (build.gradle.kts)
implementation("com.vectortechnolabs.veil:veil-android:1.0.0")
// 2. Initialize in Application.onCreate()
VeilSDK.initializeSDK(
context = this,
clientId = "your-client-id",
appId = "your-app-id",
appName = "Apex Banking",
packageName = packageName,
apiKey = "td_live_...",
policy = ThreatPolicy.WARN_ONLY,
activity = this,
) { response, error ->
if (response != null && !response.isSafe) {
// threat detected — response.riskLevel, response.threatCodes
}
}
Add the dependency
One Gradle/SPM line — available via JitPack, GitHub Packages, or XCFramework.
Initialize the SDK
Call initializeSDK() in your Application or AppDelegate with your API key.
React to threats
The callback fires every scan cycle with a full ThreatSDKResponse object.
A dashboard that shows everything
Real-time threat feed, risk breakdown charts, per-app analytics, and webhook config — all in one place.
Simple, transparent pricing
Start free. Scale as you grow. No surprise overages.
Free
Ideal for testing, evaluations, and early MVPs.
- 1 mobile app
- 10,000 security events / mo
- All 22+ threat detections
- Real-time SOC console access
- Community & docs support
Growth
For growing mobile apps and funded startups.
- Up to 3 mobile apps
- 500,000 security events / mo
- HMAC-SHA256 signed Webhooks
- Real-time SSE threat stream
- Remote Device Kill Switch
- Server Force-Update control
- Priority email & chat support
Scale
For high-volume fintech, payments, & crypto apps.
- Up to 10 mobile apps
- 2,500,000 security events / mo
- Advanced tamper & repack analytics
- Automated PCI-DSS & SOC 2 reports
- Custom threat webhook routing
- 99.9% platform uptime SLA
- Dedicated Slack channel support
Enterprise
For banks, NBFCs, and mission-critical apps.
- Unlimited apps & events
- Server-side Play Integrity & App Attest
- On-premise / Private VPC deployment
- Single Sign-On (SSO / SAML / Okta)
- Custom regulatory audit mapping (RBI / MASVS)
- 99.99% Enterprise SLA
- Dedicated Security Lead & 24/7 hotline
Frequently asked questions
Everything you need to know about integrating, deploying, and securing with Veil.
What is the CPU, memory, and battery impact on my app?
Veil is designed with zero-latency in mind. Threat checks execute in under 5ms on a dedicated non-blocking background thread. The memory footprint is under 2MB, and battery drain is negligible (< 0.01% per day).
Does Veil collect any Personally Identifiable Information (PII)?
No. Veil strictly collects non-reversible cryptographic hardware hashes and threat telemetry (threat type, risk severity, timestamp). Zero user names, emails, phone numbers, location coordinates, or banking credentials are ever captured or transmitted.
Will Veil affect App Store or Google Play Store approval?
Not at all. Veil is 100% compliant with Apple App Store Review Guidelines (shipping with the required PrivacyInfo.xcprivacy manifest) and complies with Google Play Target API mandates (Compile SDK 36, Android 15/16 ready).
How does Veil prevent attackers from bypassing the SDK itself?
Veil uses a multi-layered defense-in-depth architecture: continuous in-memory execution verification, dynamic anti-hooking trampolines, binary integrity shields, and cryptographic server-side attestation that cannot be forged on client devices.
Can I try Veil in my test environment before going to production?
Yes! The Free plan gives you full access to all threat detections and the dashboard for up to 10,000 monthly events with test API keys (td_dev_*).
Start protecting your users today
Book a 30-minute demo and we'll walk through integration, dashboard setup, and how to tune detection for your specific app category.