# Best Application Shielding Software *By [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)* Application shielding software enables users to modify and application’s source to make it more resistant to outside tampering. To qualify for inclusion in the Application Shielding category, a product must: - Protect an application from data leakage - Prevents code injections to your application - Ensure users’ protection while they use your product ## How Many Application Shielding Software Products Does G2 Track? **Total Products under this Category:** 32 ### Category Stats (Jul 2026) - **Average Rating**: 4.58/5 The average rating of products in this category, based on all submitted ratings - **Top Trending Product**: Cloudflare Application Security and Performance (+0.04%) - Among all products in this category, Cloudflare Application Security and Performance recorded the largest rating increase compared to last month *Last updated: July 01, 2026* ## How Does G2 Rank Application Shielding Software Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 900+ Authentic Reviews - 32+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. ## Which Application Shielding Software Is Best for Your Use Case? - **Leader:** [Appdome](https://www.g2.com/products/appdome/reviews) - **Easiest to Use:** [Appdome](https://www.g2.com/products/appdome/reviews) - **Top Trending:** [DoveRunner](https://www.g2.com/products/doverunner/reviews) - **Best Free Software:** [Appdome](https://www.g2.com/products/appdome/reviews) --- **Sponsored** ### cside What is cside? cside is a browser-layer security platform that gives organisations complete visibility and control over the third-party JavaScript running on their websites. It intercepts every script before it reaches the user, captures the full payload, and analyses runtime behaviour in real time. Third-party scripts power modern websites. Analytics, chat, payments, advertising, and session replay tools all inject JavaScript that runs directly in your visitors' browsers. You didn't write that code. You don't control when it changes. And you have no idea what it does at runtime. That is the client-side blind spot. The three problems cside solves 1) Every third-party script is a blind spot. Analytics, chat, payments, ads: you didn't write it, you don't control it, and you have no idea what it does at runtime inside a real browser. 2) PCI DSS 4.0.1 requirements 6.4.3 and 11.6.1 are now enforced. Most companies have no idea how to meet them, and their existing vendors don't cover it. WAFs, CDNs, and tag managers were never built for this problem. 3) AI agents and bots are now targeting high-value web workflows including checkout, login, and form submission in ways that WAFs and CDN-layer tools were never designed to catch. The attack surface has moved into the browser. The tools haven't. What you get with cside 1) Visibility you have never had. Every script on every page, classified, behavioural-profiled, and monitored continuously. Not what a scanner saw on its last crawl. What actually ran in a real user's browser, in real time. 2) Compliance, done. 6.4.3 and 11.6.1 documentation generated automatically. Auditor-ready output without manual effort. QSA-validated. No CSV exports to fill in by hand. 3) Real-time blocking. Malicious or anomalous script behaviour stopped at the browser layer before data leaves the page. Not flagged for review after the fact. Stopped before exfiltration occurs. Why CSPs and crawlers cannot solve this A Content Security Policy tells the browser which domains are allowed to load scripts. It has no visibility into what those scripts execute. A script served from a trusted domain, after being compromised through a supply chain attack, passes every CSP check and still skims card data from your checkout page. Crawlers and scanners have a different problem. Bad actors detect them and serve clean content to the scanner, then flip to malicious for real users. What the scanner saw and what your customers experienced are two different things. WAFs and CDNs operate at the network layer. They cannot see inside the browser. They check what loads, not what executes. cside sits in the delivery path of every script. It captures what scripts actually do in real user sessions. Deployment: One script tag. Under ten minutes. No managed crawl setup, no session tokens, no captcha bypasses required. Pricing: Free tier available to see your script exposure before buying. Business and Enterprise tiers for teams managing compliance, multi-domain environments, and advanced governance. Transparent pricing. No contract required to prove compliance to your QSA before you commit. Frequently asked questions 1) What makes cside different from a Content Security Policy?: A CSP controls which domains scripts can load from. It cannot analyse what those scripts execute at runtime. cside captures the full payload of every script and analyses its behaviour inside real user browsers, giving you the runtime visibility that CSP was never designed to provide. 2) What PCI DSS requirements does cside address?: cside is built specifically around requirements 6.4.3 and 11.6.1 of PCI DSS 4.0.1. It generates the authorised script inventory required by 6.4.3 and provides the ongoing change detection and monitoring required by 11.6.1, with QSA-validated audit-ready output. 3) How is cside different from a WAF or CDN security feature?: WAFs and CDNs operate at the network or server layer and have no visibility into what JavaScript executes inside a user's browser. cside operates at the browser layer. It is a dedicated product for client-side security, not a feature bolted onto an existing network tool. 4) Does cside detect AI agents and bots?: Yes. cside detects AI agents and bots targeting high-value web workflows including checkout, login, and form submission, covering a threat class that network-layer tools were not designed to address. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1452&secure%5Bdisplayable_resource_id%5D=1452&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=1452&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=1447373&secure%5Bresource_id%5D=1452&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fapplication-shielding&secure%5Btoken%5D=140872763eea5ed17b3c1a3663584d3a4e32c9499ea71de89a2dc5759e47830d&secure%5Burl%5D=https%3A%2F%2Fcside.dev%2Fbook-demo&secure%5Burl_type%5D=book_demo) --- ## What Are the Top-Rated Application Shielding Software Products in 2026? ### 1. [Appdome](https://www.g2.com/products/appdome/reviews) Appdome is an agentic platform that protects mobile apps and the mobile business at scale. Trusted by enterprises worldwide, Appdome automates mobile app security, fraud prevention, bot defense, and threat detection and response across Android and iOS applications. Unlike legacy SDK-based approaches that require manual implementation and ongoing maintenance, Appdome uses AI agents to embed protections directly into mobile apps, analyze threats in real time, and continuously adapt defenses without code or complex integration. Organizations use Appdome to protect mobile apps, APIs, identities, accounts, transactions, and users from fraud, bots, malware, account takeover, deepfakes, and other cyber threats. Appdome’s agentic mobile defense platform includes: Identity and reputation protection Fraud and account takeover (ATO) prevention Bot and API defense Mobile app security (RASP and app shielding) DevSecOps and CI/CD integration Threat management and response (including ThreatScope™ Mobile XDR, ThreatEvents™, and Threat Resolution Center™) **Average Rating:** 4.8/5.0 **Total Reviews:** 87 **How Do G2 Users Rate Appdome?** - **Ease of Use:** 9.3/10 (Category avg: 8.7/10) - **Quality of Support:** 9.6/10 (Category avg: 8.8/10) **Who Is the Company Behind Appdome?** - **Seller:** [Appdome](https://www.g2.com/sellers/appdome) - **Company Website:** https://www.appdome.com/ - **Year Founded:** 2012 - **HQ Location:** Redwood City, California, United States - **Twitter:** @appdome (2,107 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/appdome/ (173 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Banking, Financial Services - **Company Size:** 49% Enterprise, 36% Mid-Market #### What Are Appdome's Pros and Cons? **Pros:** - Customer Support (23 reviews) - Security (22 reviews) - Ease of Use (21 reviews) - Protection (19 reviews) - Implementation Ease (16 reviews) **Cons:** - Expensive (11 reviews) - Complexity (5 reviews) - Learning Curve (4 reviews) - Learning Difficulty (4 reviews) - Poor Documentation (4 reviews) ### What Do G2 Reviewers Say About Appdome? *AI-generated summary from verified user reviews* **Pros:** - Users value the **proactive customer support** of Appdome, appreciating quick responses and effective issue resolutions. - Users value the **exceptional security features** of Appdome, enhancing app protection and simplifying integration effortlessly. - Users appreciate the **ease of use** and intuitive GUI of Appdome, making mobile app security simple to implement. - Users value the **runtime application protection** of Appdome that maintains security without burdening developers with extra work. - Users value the **no-code implementation ease** of Appdome, facilitating quick and efficient integration for workflows. **Cons:** - Users note that Appdome can be quite **expensive** , making it challenging for smaller companies to afford. - Users find the **complexity of features** in Appdome overwhelming, leading to confusion during initial integration and setup. - Users find the **initial learning curve** daunting due to the overwhelming number of features and configurations. - Users often face a **learning difficulty** due to the overwhelming number of features and initial configuration complexity. - Users find the **poor documentation** of Appdome overwhelming and lacking clarity, hindering effective integration and usage. #### What Are Recent G2 Reviews of Appdome? **"[Appdome has the best customer support in the industry](https://www.g2.com/survey_responses/appdome-review-10890170)"** **Rating:** 5.0/5.0 stars *— Hyrum S.* [Read full review](https://www.g2.com/survey_responses/appdome-review-10890170) --- **"[Runtime Protection with Zero Code Changes and Streamlined Diagnostics](https://www.g2.com/survey_responses/appdome-review-12380321)"** **Rating:** 5.0/5.0 stars *— Ersa D.* [Read full review](https://www.g2.com/survey_responses/appdome-review-12380321) --- ### 2. [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) Cloudflare is the connectivity cloud for the "everywhere world," on a mission to help build a better Internet. We provide a unified platform of networking, security, and developer services delivered from a single, intelligent global network that spans hundreds of cities in over 125 countries. This empowers organizations of all sizes, from small businesses to the world's largest enterprises, to make their employees, applications, and networks faster and more secure everywhere, while significantly reducing complexity and cost. Our comprehensive platform includes: - Advanced Security: Protect your online presence with industry-leading DDoS protection, a robust Web Application Firewall (WAF), Bot mitigation, and API security. Implement Zero Trust security to secure remote access, data, and applications for your entire workforce. - Superior Performance: Accelerate website and application loading times globally with our Content Delivery Network (CDN), intelligent DNS, and smart routing capabilities. Optimize images and deliver dynamic content with unparalleled speed. - Powerful Developer Tools: Empower your developers to build and deploy full-stack applications at the edge using Cloudflare Workers (serverless functions), R2 Storage (object storage without egress fees), and D1 (serverless SQL database). Cloudflare helps connect and protect millions of customers globally, offering the control, visibility, and reliability businesses need to work, develop, and accelerate their operations in today's hyperconnected landscape. Our global network continuously learns and adapts, ensuring your digital assets are always protected and performing at their best. **Average Rating:** 4.5/5.0 **Total Reviews:** 580 **How Do G2 Users Rate Cloudflare Application Security and Performance?** - **Ease of Use:** 9.0/10 (Category avg: 8.7/10) - **Quality of Support:** 8.3/10 (Category avg: 8.8/10) **Who Is the Company Behind Cloudflare Application Security and Performance?** - **Seller:** [Cloudflare, Inc.](https://www.g2.com/sellers/cloudflare-inc) - **Company Website:** https://www.cloudflare.com - **Year Founded:** 2009 - **HQ Location:** San Francisco, California - **Twitter:** @Cloudflare (286,254 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/407222/ (7,190 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Web Developer, Software Engineer - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 62% Small-Business, 27% Mid-Market #### What Are Cloudflare Application Security and Performance's Pros and Cons? **Pros:** - Security (54 reviews) - Ease of Use (50 reviews) - Features (45 reviews) - Performance (36 reviews) - Reliability (36 reviews) **Cons:** - Complex User Interface (24 reviews) - Expensive (24 reviews) - Complex Setup (19 reviews) - Complexity (18 reviews) - Learning Curve (15 reviews) ### What Do G2 Reviewers Say About Cloudflare Application Security and Performance? *AI-generated summary from verified user reviews* **Pros:** - Users value the **strong security features** of Cloudflare, providing robust protection and peace of mind for sensitive data. - Users commend Cloudflare for its **user-friendly interface** , enabling effortless management of security and performance settings. - Users appreciate the **easy setup and fast performance** of Cloudflare, enhancing security and content delivery effortlessly. - Users value the **fast and easy performance improvements** of Cloudflare, enabling efficient content delivery with minimal latency. - Users value the **reliable performance** and security of Cloudflare, noting its fast setup and effective protection features. **Cons:** - Users find the **complex user interface** challenging, requiring time to adapt and fine-tune settings effectively. - Users find Cloudflare's pricing **expensive** and confusing, lacking clear guidance on tier benefits and features. - Users find the **complex setup** of WAF rules and settings time-consuming and challenging, especially for dynamic applications. - Users find the **complexity of setup** and extensive fine-tuning requirements challenging, impacting usability and understanding. - Users find the **steep learning curve** for setup and advanced features challenging, often overwhelming for beginners. #### What Are Recent G2 Reviews of Cloudflare Application Security and Performance? **"[Eight Years Later, Cloudflare Remains a Core Part of My Technology Stack](https://www.g2.com/survey_responses/cloudflare-application-security-and-performance-review-12963256)"** **Rating:** 5.0/5.0 stars *— Chevas M.* [Read full review](https://www.g2.com/survey_responses/cloudflare-application-security-and-performance-review-12963256) --- **"[Powerful Security and Faster Performance in One Intuitive Cloudflare Platform](https://www.g2.com/survey_responses/cloudflare-application-security-and-performance-review-12971554)"** **Rating:** 5.0/5.0 stars *— Othrax B.* [Read full review](https://www.g2.com/survey_responses/cloudflare-application-security-and-performance-review-12971554) --- #### What Are G2 Users Discussing About Cloudflare Application Security and Performance? - [What is Cloudflare Spectrum used for?](https://www.g2.com/discussions/what-is-cloudflare-spectrum-used-for) - 1 comment - [What is Cloudflare Bot Management used for?](https://www.g2.com/discussions/what-is-cloudflare-bot-management-used-for) - [Does Cloudflare provide hosting?](https://www.g2.com/discussions/does-cloudflare-provide-hosting) - 2 comments - [How good is Cloudflare DNS?](https://www.g2.com/discussions/how-good-is-cloudflare-dns) - 1 comment, 1 upvote - [What does DDoS protection do?](https://www.g2.com/discussions/what-does-ddos-protection-do) ### 3. [PreEmptive](https://www.g2.com/products/preemptive/reviews) PreEmptive secures apps against IP theft, hacking, and tampering with multi-layered protection for .NET, Java, and JavaScript. PreEmptive expertly balances cost, convenience, & functionality to secure your applications, making them more resistant to data & IP theft, hacking, & tampering. Our quick-to-implement, premium solutions provide multilayered in-app protection: Dotfuscator for .NET & Xamarin DashO for Java & Android JSDefender for JavaScript Our multi-layered approach to binary code protection employs obfuscation, encryption, root detection, shielding, & tamper-proofing to defend against exploitation by both humans and machines. PreEmptive offers passive & active defense capabilities, safeguarding trade secrets & intellectual property (IP), reducing piracy & counterfeiting, & preventing tampering of code & sensitive data inspection. Easily integrating into .NET, MAUI, Java, & Android applications, PreEmptive helps you manage application risks and ensure regulatory compliance. PreEmptive delivers premium application shielding, seamlessly integrating into your development workflow to secure software, protect your organization, and safeguard your customers. Choose PreEmptive for comprehensive, intelligent app security **Average Rating:** 4.6/5.0 **Total Reviews:** 49 **How Do G2 Users Rate PreEmptive?** - **Ease of Use:** 8.9/10 (Category avg: 8.7/10) - **Quality of Support:** 9.3/10 (Category avg: 8.8/10) **Who Is the Company Behind PreEmptive?** - **Seller:** [Sembi](https://www.g2.com/sellers/sembi) - **Year Founded:** 2023 - **HQ Location:** Austin, US - **LinkedIn® Page:** https://www.linkedin.com/company/sembi-inc/ (94 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 45% Small-Business, 41% Mid-Market #### What Are Recent G2 Reviews of PreEmptive? **"[A strong leader in its category](https://www.g2.com/survey_responses/preemptive-review-11568934)"** **Rating:** 5.0/5.0 stars *— Loïc C.* [Read full review](https://www.g2.com/survey_responses/preemptive-review-11568934) --- **"[Outstanding Support and Effortless Usability](https://www.g2.com/survey_responses/preemptive-review-12175830)"** **Rating:** 5.0/5.0 stars *— Verified User in Military* [Read full review](https://www.g2.com/survey_responses/preemptive-review-12175830) --- #### What Are G2 Users Discussing About PreEmptive? - [What is Dotfuscator – App Protection for .NET & Xamarin used for?](https://www.g2.com/discussions/what-is-dotfuscator-app-protection-for-net-xamarin-used-for) - [What is DashO – App Protection for Android & Java used for?](https://www.g2.com/discussions/what-is-dasho-app-protection-for-android-java-used-for) - [What is JSDefender – App Protection for JavaScript used for?](https://www.g2.com/discussions/what-is-jsdefender-app-protection-for-javascript-used-for) - 1 comment ### 4. [Zimperium Mobile Application Protection Suite (MAPS)](https://www.g2.com/products/zimperium-mobile-application-protection-suite-maps/reviews) Zimperium Mobile Application Protection Suite (MAPS)📱-- is a unified mobile app security platform built to protect iOS and Android apps across the entire lifecycle—from build and testing to deployment, runtime, and response. Zimperium MAPS provides on-device mobile threat detection, runtime application self-protection (RASP), application hardening, and cryptographic key protection—all integrated into a lightweight SDK that easily fits into modern DevSecOps workflows. Unlike cloud-reliant or wrapper-based tools, Zimperium MAPS delivers real-time, zero-delay protection against mobile app threats such as reverse engineering, code tampering, emulators, jailbroken/rooted environments, and malicious runtime behaviors. Zimperium MAPS Includes Four Integrated Modules: 📲 zScan – Mobile Application Security Testing (MAST): Scan iOS or Android app binaries pre-release to identify compliance, privacy, and security risks that could be exploited in production. zScan enables secure release cycles for highly regulated industries. 📲 zShield – Application Shielding for iOS and Android Apps: Protect source code, app binaries and intellectual property with advanced obfuscation, anti-tampering, and encryption—blocking reverse engineering and code modification. 📲 zDefend – Advanced Runtime Protection (RASP): Detects and responds to mobile threats in real time, on-device. zDefend protects apps from device compromise, dynamic instrumentation, emulators, and 0-day attacks—even without internet connectivity. 📲 zKeyBox – Cryptographic Key Protection: Secure encryption keys and sensitive logic within the app using white-box cryptography. zKeyBox prevents attackers from extracting secrets—even on rooted or jailbroken devices. Why Choose Zimperium MAPS for Mobile App Protection? 📱 + Unified Mobile Application Security Platform - Protect iOS and Android apps across the full lifecycle on one AI-Empowered platform. Optimize protection, accelerate releases, and respond to mobile threats faster. + End-to-end Security Visibility - Find build-time vulnerabilities, compliance violations, and real-world runtime threats in one view. + On-device Runtime Protection (RASP). Detect and block zero-day mobile threats, jailbreak and root attempts, and repackaging attacks in real time on the device. Works offline with no backend connectivity required. + Over-The-Air Security Updates - Push new mobile app protections to production without an app store release. Respond to emerging mobile threats in hours, not sprints. + Low-code and No-code app Protection - Apply code obfuscation, anti-tampering, and key protection with minimal engineering lift. Keep release velocity intact while hardening iOS and Android apps. + Flexible Deployment - Run MAPS on-prem or as SaaS to meet data residency, privacy, and regulatory compliance requirements. + AI Mobile App Response Agent - Enables SOC and Fraud analysts to trigger on-demand investigations on any device, and within minutes the agent determines whether an incident or fraud has occurred. **Average Rating:** 4.0/5.0 **Total Reviews:** 21 **How Do G2 Users Rate Zimperium Mobile Application Protection Suite (MAPS)?** - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) - **Quality of Support:** 8.2/10 (Category avg: 8.8/10) **Who Is the Company Behind Zimperium Mobile Application Protection Suite (MAPS)?** - **Seller:** [Zimperium](https://www.g2.com/sellers/zimperium) - **Company Website:** https://www.zimperium.com - **Year Founded:** 2010 - **HQ Location:** Dallas, TX - **Twitter:** @ZIMPERIUM (10,785 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/1630757/ (278 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 38% Enterprise, 29% Small-Business #### What Are Recent G2 Reviews of Zimperium Mobile Application Protection Suite (MAPS)? **"[Effective Mobile App Defense with OTA Convenience](https://www.g2.com/survey_responses/zimperium-mobile-application-protection-suite-maps-review-11998061)"** **Rating:** 4.0/5.0 stars *— Verified User in Banking* [Read full review](https://www.g2.com/survey_responses/zimperium-mobile-application-protection-suite-maps-review-11998061) --- **"[Granular Insights with Integration Hiccups](https://www.g2.com/survey_responses/zimperium-mobile-application-protection-suite-maps-review-11999366)"** **Rating:** 4.0/5.0 stars *— Gaurav T.* [Read full review](https://www.g2.com/survey_responses/zimperium-mobile-application-protection-suite-maps-review-11999366) --- #### What Are G2 Users Discussing About Zimperium Mobile Application Protection Suite (MAPS)? - [What is Zimperium Mobile Application Protection Suite (MAPS) used for?](https://www.g2.com/discussions/what-is-zimperium-mobile-application-protection-suite-maps-used-for) ### 5. [Jscrambler](https://www.g2.com/products/jscrambler/reviews) Jscrambler is the leader in Client-Side Security for the modern, composable web. As organizations increasingly build digital experiences through third-party software supply chains and AI-powered agents, sensitive data is now created directly in the browser — the point of creation for digital interactions — making it one of the enterprise’s most privileged yet least governed attack surfaces. Jscrambler’s Client-Side Security Platform is powered by a Behavioral Enforcement Core that governs how application code, third-party scripts, and sensitive data behave at runtime. By enforcing software integrity and data governance directly in the browser, the platform ensures sensitive data and AI inputs are controlled according to enterprise policy at the point of creation — before they leave the client environment. Trusted by leading global retailers, airlines, financial services providers, and healthcare organizations, Jscrambler provides the visibility and enforcement organizations need to stop client-side attacks, prevent data leakage, and maintain compliance with regulations including PCI DSS, GDPR, HIPAA, CCPA, and the EU AI Act. **Average Rating:** 4.4/5.0 **Total Reviews:** 31 **How Do G2 Users Rate Jscrambler?** - **Ease of Use:** 8.7/10 (Category avg: 8.7/10) - **Quality of Support:** 8.8/10 (Category avg: 8.8/10) **Who Is the Company Behind Jscrambler?** - **Seller:** [Jscrambler](https://www.g2.com/sellers/jscrambler) - **Company Website:** https://jscrambler.com - **Year Founded:** 2014 - **HQ Location:** San Francisco, California - **Twitter:** @Jscrambler (1,161 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/1005462/ (89 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 35% Mid-Market, 29% Small-Business #### What Are Jscrambler's Pros and Cons? **Pros:** - Security (3 reviews) - Ease of Use (2 reviews) - User Interface (2 reviews) - Automation (1 reviews) - Comprehensive Overview (1 reviews) **Cons:** - Difficult Initiation (2 reviews) - Slow Performance (2 reviews) - Dashboard Issues (1 reviews) - Error Handling (1 reviews) - Lack of Guidance (1 reviews) ### What Do G2 Reviewers Say About Jscrambler? *AI-generated summary from verified user reviews* **Pros:** - Users value the **robust security** Jscrambler provides, ensuring protection of their intellectual property in deployments. - Users value the **ease of use** of Jscrambler, highlighting its intuitive interface and seamless setup process. - Users value the **user-friendly interface** of Jscrambler, facilitating easy management and advanced obfuscation capabilities. - Users find Jscrambler's **automation capabilities** essential for seamless integration into their CI/CD pipelines, enhancing security effectively. - Users value the **comprehensive overview** of Jscrambler, enhancing security and performance effectively through gradual feature activation. **Cons:** - Users experience a **difficult initiation** with Jscrambler, facing a steep learning curve during the setup process. - Users experience **slow performance** with Jscrambler, necessitating tuning and better documentation to enhance UX. - Users note that the **dashboard can be improved** to provide more detailed insights from each installation. - Users experience **obfuscation failures** and project file limits that hinder the functionality of larger applications. - Users experience **limited guidance** with Jscrambler, making tasks like exporting reports challenging and inconsistent. #### What Are Recent G2 Reviews of Jscrambler? **"[Unmatched Code Protection with Jscrambler](https://www.g2.com/survey_responses/jscrambler-review-12607132)"** **Rating:** 5.0/5.0 stars *— Bruno V.* [Read full review](https://www.g2.com/survey_responses/jscrambler-review-12607132) --- **"[Jscrambler Integrates Seamlessly Into CI/CD for Enhanced Web App Security](https://www.g2.com/survey_responses/jscrambler-review-11802189)"** **Rating:** 5.0/5.0 stars *— Daniel G.* [Read full review](https://www.g2.com/survey_responses/jscrambler-review-11802189) --- #### What Are G2 Users Discussing About Jscrambler? - [What is Jscrambler used for?](https://www.g2.com/discussions/what-is-jscrambler-used-for) ### 6. [DoveRunner](https://www.g2.com/products/doverunner/reviews) DoveRunner, formerly known as AppSealing, is a comprehensive mobile app and content security platform designed to help businesses protect both their mobile applications and premium video content against evolving digital threats. The platform combines advanced mobile app shielding technologies with enterprise-grade video content protection solutions, enabling organizations to secure their digital ecosystem through a unified security approach. DoveRunner offers robust Runtime Application Self-Protection (RASP) capabilities for mobile apps helping businesses safeguard their intellectual property without requiring extensive coding or complex integrations. One of the standout strengths of DoveRunner is its ability to protect applications from tampering, reverse engineering, repackaging, and unauthorized modifications while simultaneously securing premium video content from piracy and illegal distribution. Through advanced security protocols, the platform actively detects and neutralizes threats targeting mobile applications and streaming environments, ensuring the integrity of both the app experience and the content delivery pipeline. DoveRunner’s user-friendly implementation process allows businesses to integrate powerful security capabilities into their existing applications and content workflows with minimal operational complexity. Its no-code and low-code deployment capabilities enable organizations to secure mobile apps and video services quickly, without lengthy development cycles or heavy infrastructure requirements. This combination of ease of use, scalability, and enterprise-grade protection makes DoveRunner an ideal choice for businesses seeking to strengthen both their mobile app security and premium content protection strategies. In summary, DoveRunner provides a unified security platform that addresses the critical challenges faced by modern app-driven and content-centric businesses. By delivering advanced mobile app shielding alongside robust video content protection and anti-piracy solutions, DoveRunner helps organizations defend their applications, protect premium content, preserve revenue streams, and create a safer digital experience for users worldwide. **Average Rating:** 4.7/5.0 **Total Reviews:** 48 **How Do G2 Users Rate DoveRunner?** - **Ease of Use:** 9.2/10 (Category avg: 8.7/10) - **Quality of Support:** 8.9/10 (Category avg: 8.8/10) **Who Is the Company Behind DoveRunner?** - **Seller:** [ DoveRunner](https://www.g2.com/sellers/doverunner) - **Company Website:** https://doverunner.com - **Year Founded:** 2000 - **HQ Location:** San Jose, US - **Twitter:** @doverunner_inc (12 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/doverunner/people/ (60 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 46% Small-Business, 42% Mid-Market #### What Are DoveRunner's Pros and Cons? **Pros:** - Data Management (1 reviews) - Intuitive (1 reviews) - User Interface (1 reviews) **Cons:** - Learning Curve (1 reviews) ### What Do G2 Reviewers Say About DoveRunner? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **intuitive interface and real-time performance tracking** of DoveRunner for efficient data management. - Users love the **intuitive interface** of DoveRunner, enhancing efficiency in data management and analysis effortlessly. - Users appreciate the **clean and intuitive interface** of DoveRunner, enhancing data management efficiency and ease of use. **Cons:** - Users find the **steep learning curve** of DoveRunner challenging, wishing for clearer guidance for new users. #### What Are Recent G2 Reviews of DoveRunner? **"[Intuitive Interface and Real-Time Tracking Make Data Management Effortless](https://www.g2.com/survey_responses/doverunner-review-12103203)"** **Rating:** 4.0/5.0 stars *— Suraj C.* [Read full review](https://www.g2.com/survey_responses/doverunner-review-12103203) --- **"[DRM Services with security](https://www.g2.com/survey_responses/doverunner-review-9828507)"** **Rating:** 4.5/5.0 stars *— Vikash R.* [Read full review](https://www.g2.com/survey_responses/doverunner-review-9828507) --- #### What Are G2 Users Discussing About DoveRunner? - [What is PallyCon used for?](https://www.g2.com/discussions/what-is-pallycon-used-for) - [How do you use Appsealing?](https://www.g2.com/discussions/appsealing-how-do-you-use-appsealing) - [How do you use Appsealing?](https://www.g2.com/discussions/how-do-you-use-appsealing) - [What is application software security?](https://www.g2.com/discussions/appsealing-what-is-application-software-security) - [What is application software security?](https://www.g2.com/discussions/what-is-application-software-security) ### 7. [LIAPP](https://www.g2.com/products/liapp/reviews) LIAPP is a specialized mobile application shielding and runtime application self-protection (RASP) solution designed to secure Android and iOS environments from unauthorized access and cyber threats. This security tool allows developers and enterprises to protect their mobile applications by applying robust security layers to the final application binary, ensuring protection against tampering and reverse engineering without requiring changes to the existing source code. The primary function of LIAPP is to maintain the integrity of mobile applications in high-stakes industries, including mobile banking, fintech, and global gaming. By implementing LIAPP, organizations can defend against various attack vectors such as rooting, jailbreaking, debugging, and memory manipulation. This solution is particularly effective for businesses that need to align their mobile services with international security standards and regional financial regulations. In addition to its core shielding capabilities, LOCKIN Company offers supplementary security modules that can be implemented alongside or independently of LIAPP to address specific vulnerabilities: LISS (Screen Protection): A dedicated solution designed to block unauthorized screen captures, screen recording, and remote access attempts to protect visual data integrity. LIKEY (Security Keypad): A specialized virtual keypad that encrypts and secures sensitive user input to prevent data interception from keyloggers and other malicious methods. LIAPP’s deployment model is optimized for rapid integration into the development lifecycle, minimizing the technical burden on engineering teams. This allows organizations to maintain their scheduled release cycles while providing a secure environment for their end-users. The solution provides several key technical advantages: Comprehensive App Shielding: Prevents unauthorized modification and repackaging of the application to ensure the software functions as originally intended. Dynamic Runtime Protection: Actively detects and blocks security threats during the application's execution to prevent data breaches in real-time. Modular Security Expansion: Enables users to enhance their security posture by adding LISS for screen protection or LIKEY for secure data entry based on specific operational needs. Regulatory Compliance Support: Provides the necessary technical infrastructure to assist financial institutions in meeting stringent mobile transaction security and fraud prevention requirements. Through its specialized focus on application integrity, LIAPP assists users in managing the security lifecycle of their mobile products. It offers monitoring capabilities and threat intelligence, allowing stakeholders to identify emerging risks and maintain a resilient mobile presence. **Average Rating:** 4.8/5.0 **Total Reviews:** 20 **How Do G2 Users Rate LIAPP?** - **Ease of Use:** 9.2/10 (Category avg: 8.7/10) - **Quality of Support:** 9.2/10 (Category avg: 8.8/10) **Who Is the Company Behind LIAPP?** - **Seller:** [Lockin Company](https://www.g2.com/sellers/lockin-company) - **Year Founded:** 2013 - **HQ Location:** Seongnam-si,Gyeonggi-do - **LinkedIn® Page:** https://www.linkedin.com/company/lockin-company/ (4 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer Games - **Company Size:** 60% Mid-Market, 35% Small-Business #### What Are Recent G2 Reviews of LIAPP? **"[Efficient and powerful security solution LIAPP recommended!](https://www.g2.com/survey_responses/liapp-review-6712420)"** **Rating:** 5.0/5.0 stars *— Verified User in Computer Games* [Read full review](https://www.g2.com/survey_responses/liapp-review-6712420) --- **"[Defense against hacking and forgery attacks](https://www.g2.com/survey_responses/liapp-review-8709178)"** **Rating:** 5.0/5.0 stars *— Gary C.* [Read full review](https://www.g2.com/survey_responses/liapp-review-8709178) --- #### What Are G2 Users Discussing About LIAPP? - [What is LIAPP used for?](https://www.g2.com/discussions/what-is-liapp-used-for) ### 8. [DexProtector](https://www.g2.com/products/dexprotector/reviews) Mobile applications are increasingly targeted by attackers looking to reverse engineer code, bypass security controls, and manipulate app behavior at runtime. DexProtector is an EMVCo-evaluated and approved mobile application protection tool that helps organizations protect their mobile apps in the wild. It secures application logic, prevents tampering, and detects compromised environments without requiring code changes or complex integrations. Used by organizations in more than 75 countries and protecting applications on over 500 million devices, DexProtector is trusted by teams building secure mobile banking, payment, and other high-risk applications. Protect apps without changing your code: DexProtector integrates directly into your build process as a CLI, Gradle, or CI/CD task. Protections are automatically applied to Android and iOS apps and SDKs (APKs, AABs, AARs, IPAs, frameworks), with no SDKs, no refactoring, and no disruption to development workflows. Prevent reverse engineering, tampering, and runtime attacks: DexProtector combines multiple layers of protection to secure both application code and runtime behavior. • Protects code with advanced obfuscation and encryption • Detects compromised environments (rooted, jailbroken, and emulated devices) • Prevents debugging, dynamic instrumentation, and runtime manipulation • Enforces application integrity and anti-tampering controls Built for regulated and high-risk environments: DexProtector has been evaluated and approved under EMVCo SBMP (Software-Based Mobile Payments) as a Software Protection Tool (SPT), helping to streamline certification for applications and SDKs, and supporting compliance in highly-regulated industries. Extend protection with real-time threat intelligence: DexProtector can be integrated with Licel's Alice Threat and Device Intelligence solution to provide real-time insight into device risk, threat signals, and suspicious behavior. This enables teams to detect and respond to threats beyond the application layer. Key capabilities: • String, class, and native library encryption • Cross-platform code protection (React Native, Flutter, Xamarin, etc.) • Root, jailbreak, and emulator detection • Debugging and dynamic instrumentation detection • Public key certificate validation • White-box cryptography • Anti-malware mechanisms • Mobile API Protection • Anti-tampering and integrity enforcement **Average Rating:** 4.9/5.0 **Total Reviews:** 9 **How Do G2 Users Rate DexProtector?** - **Ease of Use:** 9.4/10 (Category avg: 8.7/10) - **Quality of Support:** 10.0/10 (Category avg: 8.8/10) **Who Is the Company Behind DexProtector?** - **Seller:** [Licel](https://www.g2.com/sellers/licel) - **Year Founded:** 2011 - **HQ Location:** London, GB - **LinkedIn® Page:** https://www.linkedin.com/company/licel/ (33 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 40% Mid-Market, 30% Small-Business #### What Are Recent G2 Reviews of DexProtector? **"[Strong, Reliable Mobile App Protection with DexProtector](https://www.g2.com/survey_responses/dexprotector-review-12664384)"** **Rating:** 5.0/5.0 stars *— Carlos H.* [Read full review](https://www.g2.com/survey_responses/dexprotector-review-12664384) --- **"[Secure Android Apps with Minor Licensing Hiccups](https://www.g2.com/survey_responses/dexprotector-review-12721294)"** **Rating:** 4.5/5.0 stars *— Zafer .* [Read full review](https://www.g2.com/survey_responses/dexprotector-review-12721294) --- #### What Are G2 Users Discussing About DexProtector? - [What is DexProtector used for?](https://www.g2.com/discussions/what-is-dexprotector-used-for) ### 9. [cside](https://www.g2.com/products/cside/reviews) What is cside? cside is a browser-layer security platform that gives organisations complete visibility and control over the third-party JavaScript running on their websites. It intercepts every script before it reaches the user, captures the full payload, and analyses runtime behaviour in real time. Third-party scripts power modern websites. Analytics, chat, payments, advertising, and session replay tools all inject JavaScript that runs directly in your visitors' browsers. You didn't write that code. You don't control when it changes. And you have no idea what it does at runtime. That is the client-side blind spot. The three problems cside solves 1) Every third-party script is a blind spot. Analytics, chat, payments, ads: you didn't write it, you don't control it, and you have no idea what it does at runtime inside a real browser. 2) PCI DSS 4.0.1 requirements 6.4.3 and 11.6.1 are now enforced. Most companies have no idea how to meet them, and their existing vendors don't cover it. WAFs, CDNs, and tag managers were never built for this problem. 3) AI agents and bots are now targeting high-value web workflows including checkout, login, and form submission in ways that WAFs and CDN-layer tools were never designed to catch. The attack surface has moved into the browser. The tools haven't. What you get with cside 1) Visibility you have never had. Every script on every page, classified, behavioural-profiled, and monitored continuously. Not what a scanner saw on its last crawl. What actually ran in a real user's browser, in real time. 2) Compliance, done. 6.4.3 and 11.6.1 documentation generated automatically. Auditor-ready output without manual effort. QSA-validated. No CSV exports to fill in by hand. 3) Real-time blocking. Malicious or anomalous script behaviour stopped at the browser layer before data leaves the page. Not flagged for review after the fact. Stopped before exfiltration occurs. Why CSPs and crawlers cannot solve this A Content Security Policy tells the browser which domains are allowed to load scripts. It has no visibility into what those scripts execute. A script served from a trusted domain, after being compromised through a supply chain attack, passes every CSP check and still skims card data from your checkout page. Crawlers and scanners have a different problem. Bad actors detect them and serve clean content to the scanner, then flip to malicious for real users. What the scanner saw and what your customers experienced are two different things. WAFs and CDNs operate at the network layer. They cannot see inside the browser. They check what loads, not what executes. cside sits in the delivery path of every script. It captures what scripts actually do in real user sessions. Deployment: One script tag. Under ten minutes. No managed crawl setup, no session tokens, no captcha bypasses required. Pricing: Free tier available to see your script exposure before buying. Business and Enterprise tiers for teams managing compliance, multi-domain environments, and advanced governance. Transparent pricing. No contract required to prove compliance to your QSA before you commit. Frequently asked questions 1) What makes cside different from a Content Security Policy?: A CSP controls which domains scripts can load from. It cannot analyse what those scripts execute at runtime. cside captures the full payload of every script and analyses its behaviour inside real user browsers, giving you the runtime visibility that CSP was never designed to provide. 2) What PCI DSS requirements does cside address?: cside is built specifically around requirements 6.4.3 and 11.6.1 of PCI DSS 4.0.1. It generates the authorised script inventory required by 6.4.3 and provides the ongoing change detection and monitoring required by 11.6.1, with QSA-validated audit-ready output. 3) How is cside different from a WAF or CDN security feature?: WAFs and CDNs operate at the network or server layer and have no visibility into what JavaScript executes inside a user's browser. cside operates at the browser layer. It is a dedicated product for client-side security, not a feature bolted onto an existing network tool. 4) Does cside detect AI agents and bots?: Yes. cside detects AI agents and bots targeting high-value web workflows including checkout, login, and form submission, covering a threat class that network-layer tools were not designed to address. **Average Rating:** 4.8/5.0 **Total Reviews:** 12 **How Do G2 Users Rate cside?** - **Ease of Use:** 9.2/10 (Category avg: 8.7/10) - **Quality of Support:** 10.0/10 (Category avg: 8.8/10) **Who Is the Company Behind cside?** - **Seller:** [cside](https://www.g2.com/sellers/cside) - **Company Website:** https://cside.dev/?utm_source=thefundingletter.beehiiv.com&utm_medium=newsletter&utm_campaign=the-funding-letter-1420-may-20 - **Year Founded:** 2024 - **HQ Location:** San Francisco, US - **LinkedIn® Page:** https://www.linkedin.com/company/csidedev (21 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 83% Small-Business, 17% Mid-Market #### What Are cside's Pros and Cons? **Pros:** - Monitoring (3 reviews) - Helpful (2 reviews) - Threat Detection (2 reviews) - Accuracy of Information (1 reviews) - Alert Notifications (1 reviews) **Cons:** - Difficult Initiation (1 reviews) - Navigation Issues (1 reviews) - Not Intuitive (1 reviews) - Not User-Friendly (1 reviews) - UX Improvement (1 reviews) ### What Do G2 Reviewers Say About cside? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **intuitive monitoring** of cside, enabling easy tracking of scripts and compliance effortlessly. - Users value the **control over third-party scripts** that c/side provides, enhancing security and transparency on their sites. - Users praise the **exceptional threat detection** of c/side, significantly enhancing their security and protecting against overlooked cyber threats. - Users commend the **accuracy of information** provided by c/side, significantly enhancing their security posture and compliance efforts. - Users value the **alert notifications** for effectively identifying issues early, enhancing security and compliance in their browsers. **Cons:** - Users find the **difficult initiation** process challenging, but once understood, the system's power becomes evident. - Users face **navigation issues** , finding the interface non-intuitive and requiring time to learn its various functions. - Users find the interface **not intuitive** , requiring time to understand script grouping and display logic effectively. - Users find the **interface unintuitive** , requiring trial and error to navigate effectively and understand script behavior. - Users notice **rough edges and occasional issues** with the product, though support helps mitigate these concerns efficiently. #### What Are Recent G2 Reviews of cside? **"[Great price to protect and secure marketing data](https://www.g2.com/survey_responses/cside-review-12873342)"** **Rating:** 5.0/5.0 stars *— Verified User in Marketing and Advertising* [Read full review](https://www.g2.com/survey_responses/cside-review-12873342) --- **"[A simple PCI DSS solution backed by outstanding support](https://www.g2.com/survey_responses/cside-review-12189954)"** **Rating:** 4.5/5.0 stars *— Frédéric B.* [Read full review](https://www.g2.com/survey_responses/cside-review-12189954) --- ### 10. [RedShield](https://www.g2.com/products/redshield/reviews) RedShield is the web application shielding-with-a-service cybersecurity company. **Average Rating:** 3.9/5.0 **Total Reviews:** 4 **Who Is the Company Behind RedShield?** - **Seller:** [Red Shield](https://www.g2.com/sellers/red-shield) - **Year Founded:** 2008 - **HQ Location:** Wellington, NZ - **LinkedIn® Page:** http://www.linkedin.com/company/redshield-security (54 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 80% Small-Business, 20% Mid-Market #### What Are Recent G2 Reviews of RedShield? **"[a great insurance plan](https://www.g2.com/survey_responses/redshield-review-7520908)"** **Rating:** 4.0/5.0 stars *— steven w.* [Read full review](https://www.g2.com/survey_responses/redshield-review-7520908) --- **"[Product Review](https://www.g2.com/survey_responses/redshield-review-7520342)"** **Rating:** 5.0/5.0 stars *— Maxwel C.* [Read full review](https://www.g2.com/survey_responses/redshield-review-7520342) --- ### 11. [Feroot Security](https://www.g2.com/products/feroot-security/reviews) The Feroot AI Platform brings intelligent automation to ensure compliant and secure user experiences across web and mobile applications—eliminating manual processes, reducing human error, and replacing operational overhead with continuous, real-time protection. Instead of spending months manually auditing websites and mobile applications, organizations can achieve security and compliance in as little as 45 seconds. Feroot automates website security and compliance programs to help meet the requirements of PCI DSS 4.0.1, HIPAA (including Rules on the Use of Online Tracking Technologies), CCPA / CPRA, GDPR, CIPA, and more than 50 global laws and industry standards. At the core of the platform are Feroot AI Agents that continuously monitor, detect, and enforce compliance across client-side environments. They identify and stop hidden threats such as Magecart attacks, formjacking, unauthorized tracking, data leakage, and malicious third-party scripts before they can compromise sensitive data. Feroot is purpose-built to protect high-value web assets including payment pages, login forms, healthcare portals, and other sensitive workflows where customer and patient data is most at risk. The unified platform integrates critical web security and compliance capabilities into a single solution, including: • JavaScript behavior analysis • Web compliance scanning • Third-party script monitoring • Consent audit and policy enforcement • Data privacy posture management By combining security monitoring with automated compliance enforcement, Feroot provides complete visibility and control over client-side risk without adding complexity. From Fortune 500 enterprises to healthcare providers, retailers, SaaS platforms, universities, utilities, municipalities, travel companies, gaming platforms, and payment service providers, organizations of all sizes trust Feroot to safeguard sensitive customer data and maintain regulatory compliance in an increasingly complex digital landscape. Feroot AI solutions include: • PaymentGuard AI – Protects payment workflows and PCI-scoped environments • HealthData Shield AI – Secures patient data and healthcare portals • AlphaPrivacy AI – Ensures data privacy compliance and user consent enforcement • CodeGuard AI – Monitors and protects client-side code integrity and behavior Visit https://www.feroot.com for more information. **Average Rating:** 4.9/5.0 **Total Reviews:** 28 **How Do G2 Users Rate Feroot Security?** - **Ease of Use:** 8.7/10 (Category avg: 8.7/10) - **Quality of Support:** 9.9/10 (Category avg: 8.8/10) **Who Is the Company Behind Feroot Security?** - **Seller:** [Feroot Security](https://www.g2.com/sellers/feroot-security) - **Company Website:** https://www.feroot.com - **Year Founded:** 2017 - **HQ Location:** Toronto, Ontario, Canada - **LinkedIn® Page:** http://www.linkedin.com/company/feroot (51 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 50% Enterprise, 29% Mid-Market #### What Are Feroot Security's Pros and Cons? **Pros:** - Customer Support (14 reviews) - Ease of Use (9 reviews) - Security (9 reviews) - Helpful (7 reviews) - Easy Integrations (6 reviews) **Cons:** - Poor Interface Design (4 reviews) - Complexity (3 reviews) - Not Intuitive (3 reviews) - Complex Setup (2 reviews) - Difficult Setup (2 reviews) ### What Do G2 Reviewers Say About Feroot Security? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **attentive and responsive customer support** from Feroot, enhancing their overall security experience. - Users value the **ease of use** of Feroot Security, appreciating its seamless integration and supportive onboarding experience. - Users commend Feroot's **robust security framework** , enhancing compliance and efficiently addressing vulnerabilities with excellent support. - Users commend Feroot for its **exceptional support** and quick responses, enhancing overall satisfaction and security effectiveness. - Users value the **easy integrations** with existing infrastructure, appreciating the seamless setup and efficient support provided. **Cons:** - Users find the **interface design lacking** , making initial setup and navigation more challenging than necessary. - Users find a steep **learning curve** with Feroot Security, especially in navigating configurations and the user interface. - Users find the **non-intuitive structure** challenging initially, requiring time to navigate and learn the platform effectively. - Users find the **complex setup** process challenging, requiring time to navigate and understand the platform effectively. - Users find the **difficult setup** process for policies in Feroot Security to be inefficient and not user-friendly. #### What Are Recent G2 Reviews of Feroot Security? **"[Robust Client-Side Security with Exceptional Support](https://www.g2.com/survey_responses/feroot-security-review-12512024)"** **Rating:** 5.0/5.0 stars *— Hama M.* [Read full review](https://www.g2.com/survey_responses/feroot-security-review-12512024) --- **"[Effective tooling for PCI DSS compliance, great team](https://www.g2.com/survey_responses/feroot-security-review-12764308)"** **Rating:** 5.0/5.0 stars *— Daniel F.* [Read full review](https://www.g2.com/survey_responses/feroot-security-review-12764308) --- ### 12. [Promon Shield for Mobile](https://www.g2.com/products/promon-shield-for-mobile/reviews) Promon Shield for Mobile™ is a runtime application self-protection (RASP) and application shielding solution that embeds always-on, in-app protection for Android and iOS apps using a no-code, post-compile approach without slowing app-releases. With 20 years of mobile app security expertise, Promon protects over 2.5 billion users, secures over 13 billion monthly transactions, and safeguards more than $2.5 trillion in market cap. Promon helps organizations meet compliance, reduce mobile fraud risk, and strengthens protection against AI-enhanced attacks and malware with technology that integrates post-compile directly into CI/CD pipelines, reducing deployment from months to minutes. What does Promon Shield for Mobile™ protect against? - App tampering, repackaging, and cloning - Reverse engineering and code injection - Jailbreak and root detection evasion - Debuggers, hooking frameworks, and dynamic analysis - Malware, overlay attacks, keyloggers, screen readers, and deepfakes - On-device AI model theft and manipulation How it works: Shield for Mobile applies protection after your app is compiled, without modifications to source code, disruptions to developer workflows, or impacts to performance. When a threat is detected, the in-app protection layer reacts in real time: blocking the threat, exiting the app, or reporting it to your SIEM and fraud management platforms based on policies you define. Shield employs multiple runtime protections mapped to real attacker behavior, and is continuously updated based on findings from the Promon Security Research Team. Built for compliance-driven industries: Ship with confidence across regulated markets. Promon Shield for Mobile™ enforces runtime protections that align with major global regulations, including \*\*PCI DSS\*\*, \*\*GDPR\*\*, \*\*PSD2\*\*, \*\*DORA\*\*, and \*\*CCPA\*\*. It provides tamper-proof, audit-ready evidence to support compliance reviews — reducing audit complexity and demonstrating a verifiable security posture to regulators and partners alike. Promon pioneered runtime application self-protection (RASP) and is the trusted choice for banking, payments, gaming, healthcare, streaming, retail, and public sector organizations worldwide. Key capabilities: - Integration with GitHub Actions, Azure DevOps, Jenkins, Maven, and Gradle - Cross-platform support across native and hybrid apps, and React Native, Flutter, Electron frameworks - Compatible with Android, iOS, HarmonyOS, ChromeOS, Amazon Fire OS, and macOS (for mobile apps running on desktop) - Supports C, C++, Rust, Java, Kotlin, Objective-C, Swift, and Dart - IDE integrations for Android Studio, Xcode, and Visual Studio - 24/7 global technical support Why teams choose Promon Shield for Mobile™: Promon Shield for Mobile™ is built for trust, compliance, and speed. It empowers teams to deliver protected app experiences users never notice. Protect what you build, wherever your apps run. You Develop. We Protect. **Average Rating:** 4.0/5.0 **Total Reviews:** 3 **How Do G2 Users Rate Promon Shield for Mobile?** - **Ease of Use:** 8.9/10 (Category avg: 8.7/10) - **Quality of Support:** 6.1/10 (Category avg: 8.8/10) **Who Is the Company Behind Promon Shield for Mobile?** - **Seller:** [Promon](https://www.g2.com/sellers/promon) - **Company Website:** https://promon.io/ - **Year Founded:** 2006 - **HQ Location:** Oslo, NO - **LinkedIn® Page:** https://uk.linkedin.com/company/promon-as (135 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 33% Enterprise, 33% Mid-Market #### What Are Recent G2 Reviews of Promon Shield for Mobile? **"[Secure your way](https://www.g2.com/survey_responses/promon-shield-for-mobile-review-7549991)"** **Rating:** 4.5/5.0 stars *— Verified User in Financial Services* [Read full review](https://www.g2.com/survey_responses/promon-shield-for-mobile-review-7549991) --- **"[Best in the market for app security](https://www.g2.com/survey_responses/promon-shield-for-mobile-review-8898522)"** **Rating:** 4.0/5.0 stars *— Verified User in Marketing and Advertising* [Read full review](https://www.g2.com/survey_responses/promon-shield-for-mobile-review-8898522) --- ### 13. [Codacy](https://www.g2.com/products/codacy/reviews) Codacy is the code quality and security platform for AI-assisted engineering teams. AI is now embedded through the engineering workflow, which has made teams faster, but also adds risk to everything they ship. Codacy helps AI-assisted teams ship high-quality, secure code across the full software development lifecycle, starting in the agent and editor, through pull requests in Git, and into containers and runtime security. At each stage we check for quality issues, security vulnerabilities and AI coding risk introduced into the codebase, and help devs and agent fix them effortlessly. A team's standards become automated guardrails that apply across every IDE, AI coding agent, and Pull Request. More than 250,000 developers rely on Codacy to keep quality and security stable as AI changes how software gets built. Add your repo and get your free scan report in minutes: https://codacy.com **Average Rating:** 4.6/5.0 **Total Reviews:** 29 **How Do G2 Users Rate Codacy?** - **Ease of Use:** 9.1/10 (Category avg: 8.7/10) - **Quality of Support:** 9.1/10 (Category avg: 8.8/10) **Who Is the Company Behind Codacy?** - **Seller:** [Codacy](https://www.g2.com/sellers/codacy) - **Year Founded:** 2012 - **HQ Location:** Lisbon, Lisboa - **Twitter:** @codacy (5,002 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/3310124/ (71 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer Software - **Company Size:** 59% Small-Business, 24% Mid-Market #### What Are Codacy's Pros and Cons? **Pros:** - Security (2 reviews) - Automation (1 reviews) - Automation Testing (1 reviews) - Code Quality (1 reviews) - Customer Support (1 reviews) **Cons:** - Expensive (1 reviews) ### What Do G2 Reviewers Say About Codacy? *AI-generated summary from verified user reviews* **Pros:** - Users value the **security dashboard and vulnerability management** features, providing valuable insights and enhancing code safety. - Users value the **out-of-the-box automation** of Codacy, finding it easy to use for maintaining code quality. - Users value the **integrated automation** features of Codacy, appreciating its ease of use and quality assurance capabilities. - Users appreciate the **effective code quality tools** in Codacy, ensuring clean and safe code with ease of use. - Users appreciate the **helpful customer support** of Codacy, noting their immediate assistance is invaluable to developers. **Cons:** - Users find Codacy to be **expensive** at $19/month, making it less accessible for smaller organizations. #### What Are Recent G2 Reviews of Codacy? **"[Codacy is a security must-have tool in our company](https://www.g2.com/survey_responses/codacy-review-10264506)"** **Rating:** 5.0/5.0 stars *— David M.* [Read full review](https://www.g2.com/survey_responses/codacy-review-10264506) --- **"[Easy GitHub & CI/CD Integration That Catches Bugs Before Production](https://www.g2.com/survey_responses/codacy-review-12739228)"** **Rating:** 4.5/5.0 stars *— Arjun M.* [Read full review](https://www.g2.com/survey_responses/codacy-review-12739228) --- ### 14. [ThreatCast](https://www.g2.com/products/threatcast/reviews) Real-time visibility for iOS and Android apps Monitor your apps in real-time and continuously improve your security implementation with ThreatCast’s actionable feedback. Monitor threats in real-time with intuitive dashboards and custom alerts. Analyze threat data and uncover how threat actors are attempting to compromise your app. Act on your insights by identifying suspicious users and implementing security findings into future development. **Average Rating:** 5.0/5.0 **Total Reviews:** 2 **How Do G2 Users Rate ThreatCast?** - **Ease of Use:** 9.2/10 (Category avg: 8.7/10) - **Quality of Support:** 10.0/10 (Category avg: 8.8/10) **Who Is the Company Behind ThreatCast?** - **Seller:** [GuardSquare NV](https://www.g2.com/sellers/guardsquare-nv) - **Year Founded:** 2014 - **HQ Location:** Leuven, Belgium - **Twitter:** @GuardSquare (4,049 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/5012731 (179 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Small-Business #### What Are Recent G2 Reviews of ThreatCast? **"[Threatcast review](https://www.g2.com/survey_responses/threatcast-review-9080890)"** **Rating:** 5.0/5.0 stars *— Verified User in Business Supplies and Equipment* [Read full review](https://www.g2.com/survey_responses/threatcast-review-9080890) --- **"[Threatcast review](https://www.g2.com/survey_responses/threatcast-review-9080479)"** **Rating:** 5.0/5.0 stars *— Verified User in Accounting* [Read full review](https://www.g2.com/survey_responses/threatcast-review-9080479) --- ### 15. [C-Prot Embedded AppDefense](https://www.g2.com/products/c-prot-embedded-appdefense/reviews) C-Prot Embedded AppDefense is an SDK solution that enables easy integration into mobile applications and solutions developed by app developers, security providers or mobile service providers to ensure security. **Average Rating:** 5.0/5.0 **Total Reviews:** 1 **Who Is the Company Behind C-Prot Embedded AppDefense?** - **Seller:** [C-Prot Siber Güvenlik Teknolojileri A.S](https://www.g2.com/sellers/c-prot-siber-guvenlik-teknolojileri-a-s) - **Year Founded:** 2010 - **HQ Location:** Mersin, TR - **Twitter:** @cprottr (194 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/c-prottr/ (13 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Small-Business #### What Are Recent G2 Reviews of C-Prot Embedded AppDefense? **"[C-Prot Appdefense is a comprehensive, powerful application for mobile application security needs](https://www.g2.com/survey_responses/c-prot-embedded-appdefense-review-8867039)"** **Rating:** 5.0/5.0 stars *— Yahya C.* [Read full review](https://www.g2.com/survey_responses/c-prot-embedded-appdefense-review-8867039) --- ### 16. [V-OS App Protection](https://www.g2.com/products/v-os-app-protection/reviews) Built on top of V-Key’s patented V-OS Virtual Secure Element as the security foundation, V-OS App Protection adds another layer of tamper protection and security enhancements. **Average Rating:** 4.5/5.0 **Total Reviews:** 1 **How Do G2 Users Rate V-OS App Protection?** - **Ease of Use:** 8.3/10 (Category avg: 8.7/10) - **Quality of Support:** 8.3/10 (Category avg: 8.8/10) **Who Is the Company Behind V-OS App Protection?** - **Seller:** [V-Key](https://www.g2.com/sellers/v-key) - **Year Founded:** 2011 - **HQ Location:** Singapore, SG - **Twitter:** @vkey_inc (255 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/v-key-inc (118 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Enterprise #### What Are Recent G2 Reviews of V-OS App Protection? **"[V-OS App Protection: The Robust App Protector](https://www.g2.com/survey_responses/v-os-app-protection-review-10388834)"** **Rating:** 4.5/5.0 stars *— Siddharth Ranjan S.* [Read full review](https://www.g2.com/survey_responses/v-os-app-protection-review-10388834) --- ### 17. [V-OS Virtual Secure Element](https://www.g2.com/products/v-os-virtual-secure-element/reviews) V-OS is a virtual secure element. It is a secure sandbox that is embedded within a native iOS or Android mobile app, and creates a safe operating environment where data can be stored and cryptographic processes can be executed in isolation from the rest of the mobile app. **Average Rating:** 4.5/5.0 **Total Reviews:** 1 **How Do G2 Users Rate V-OS Virtual Secure Element?** - **Ease of Use:** 8.3/10 (Category avg: 8.7/10) - **Quality of Support:** 8.3/10 (Category avg: 8.8/10) **Who Is the Company Behind V-OS Virtual Secure Element?** - **Seller:** [V-Key](https://www.g2.com/sellers/v-key) - **Year Founded:** 2011 - **HQ Location:** Singapore, SG - **Twitter:** @vkey_inc (255 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/v-key-inc (118 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Enterprise #### What Are Recent G2 Reviews of V-OS Virtual Secure Element? **"[V-OS: The cryptographic key protector for Cloud application](https://www.g2.com/survey_responses/v-os-virtual-secure-element-review-10378794)"** **Rating:** 4.5/5.0 stars *— Siddharth Ranjan S.* [Read full review](https://www.g2.com/survey_responses/v-os-virtual-secure-element-review-10378794) --- ### 18. [Data Theorem](https://www.g2.com/products/data-theorem-data-theorem/reviews) RamQuest’s solutions include our fully integrated closing, escrow accounting, imaging, transaction management, esigning, and digital marketplace solutions and are available on-premise or in a hosted environment **Average Rating:** 4.0/5.0 **Total Reviews:** 1 **Who Is the Company Behind Data Theorem?** - **Seller:** [Data Theorem](https://www.g2.com/sellers/data-theorem) - **Year Founded:** 2013 - **HQ Location:** Palo Alto, California, United States - **LinkedIn® Page:** https://www.linkedin.com/company/datatheorem/ (94 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Enterprise #### What Are Recent G2 Reviews of Data Theorem? **"[Convenient AppSec](https://www.g2.com/survey_responses/data-theorem-review-5226382)"** **Rating:** 4.0/5.0 stars *— Verified User in Transportation/Trucking/Railroad* [Read full review](https://www.g2.com/survey_responses/data-theorem-review-5226382) --- ### 19. [Digital.ai Application Protection](https://www.g2.com/products/digital-ai-application-protection/reviews) Digital.ai Application Protection offers protection and management solutions for IoT, mobile, and other applications. **Who Is the Company Behind Digital.ai Application Protection?** - **Seller:** [Digital.ai](https://www.g2.com/sellers/digital-ai) - **HQ Location:** Raleigh, NC - **Twitter:** @digitaldotai (819 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/65034840/ (945 employees on LinkedIn®) ### 20. [Domdog](https://www.g2.com/products/domdog/reviews) Domdog is the most flexible and no-nonsense solution for compliance with 6.4.3 and 11.6.1 requirements of PCI DSS 4.0.1. Every organization has different preferences and constraints regarding what new systems they can integrate into their payment pages. With this in mind, Domdog has been designed to support Remote Scanning, JavaScript Agent, and Content Security Policy. This ensures that no matter what an organization's preferences are, Domdog can help them meet the 6.4.3 and 11.6.1 requirements with the least amount of effort and friction. Domdog offers a range of plans that cover small businesses to large enterprises. While the Business plan focuses on cost-effectiveness and simplified compliance, the Enterprise plan focuses on maximum flexibility and managed onboarding. **Who Is the Company Behind Domdog?** - **Seller:** [Domdog](https://www.g2.com/sellers/domdog) - **HQ Location:** Delaware, US - **LinkedIn® Page:** http://linkedin.com/company/domdogsec (6 employees on LinkedIn®) ### 21. [Endcrypt](https://www.g2.com/products/endcrypt/reviews) EndCrypt is a security solution implemented within the application (instead of the network or the operating system) to make it more resistant to attacks. It is a ready-to-use SDK to embed within a mobile application to secure it from environmantal threats. **Who Is the Company Behind Endcrypt?** - **Seller:** [Procenne](https://www.g2.com/sellers/procenne) - **Year Founded:** 2013 - **HQ Location:** İstanbul, TR - **LinkedIn® Page:** https://www.linkedin.com/company/procenneds (63 employees on LinkedIn®) ### 22. [Eyeriss](https://www.g2.com/products/eyeriss/reviews) Eyeriss is an API gateway built from the ground up around security. Eyeriss has built-in conditional role-based access control, multiple authentication methods for both clients and backend services, and provides a plethora of metrics for API usage out of the box. It features a split architecture that is built for resiliency, speed, and horizontal scalability. With the defense-in-depth model, security teams and developers alike can be sure their API endpoints are strongly protected from any misuse. Eyeriss is intended to be easy to use for security engineers and developers alike, all while maintaining the capability to handle large traffic and request volumes to ensure availability to backend API services. The powerful WAF features of Eyeriss protects onboarded endpoints from a variety of attacks, greatly lowering the potential for outages and breaches. The on-prem and SaaS Enterprise offering of Eyeriss is ready for any production environment with many build-in integrations for connecting to alerting services, SEIMs, and many more tools to enhance both security teams and developers. **Who Is the Company Behind Eyeriss?** - **Seller:** [Eyeriss](https://www.g2.com/sellers/eyeriss) - **HQ Location:** N/A - **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®) ### 23. [Forces Unseen](https://www.g2.com/products/forces-unseen/reviews) Forces Unseen's bread and butter is application security, particularly with bleeding-edge technologies often used by startups. Forces Unseen excels at helping companies secure products that use technologies where there may not be established security guidance. Forces Unseen's co-founders have extensive experience advising Fortune 500 companies and startups with the security of their web applications, mobile applications, cloud environments, and Kubernetes deployments. They have also worked in security engineering and security research roles at companies such as Apple and Soluble (now Lacework). **Who Is the Company Behind Forces Unseen?** - **Seller:** [Forces Unseen](https://www.g2.com/sellers/forces-unseen) - **HQ Location:** N/A - **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®) ### 24. [HackGuard](https://www.g2.com/products/hackguard/reviews) HackGuard focus 100% on keeping your important App secure, everywhere it runs, at all times, on every device. **Who Is the Company Behind HackGuard?** - **Seller:** [AppVision](https://www.g2.com/sellers/appvision) - **HQ Location:** N/A - **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®) ### 25. [HimitsuShell](https://www.g2.com/products/himitsushell/reviews) HimitsuShell is a shell script compiler designed to protect shell scripts and Docker images for commercial software distribution. It converts shell scripts into obfuscated binaries using an embedded shell interpreter, helping reduce source code exposure and making reverse engineering more difficult. It can be used as an alternative to shc and Bunster. Key protection features include OS-level logging and hooking protection, dynamic library hooking protection, string and constant encryption, debugger detection, and advanced obfuscation techniques such as indirect calls, indirect branches, instruction substitution, basic block splitting, and bogus control flow. HimitsuShell is available as a free Web Edition for quick compilation and a Local Edition delivered as a Docker image for offline use and maximum protection. License verification helps software vendors implement DRM for shell scripts and Docker images by restricting execution to authorized users, helping prevent unauthorized use, redistribution, and source code exposure. **Who Is the Company Behind HimitsuShell?** - **Seller:** [Mush Software](https://www.g2.com/sellers/mush-software) - **HQ Location:** N/A - **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®) ## What Is Application Shielding Software? [Application Security Software](https://www.g2.com/categories/application-security) ## What Software Categories Are Similar to Application Shielding Software? - [Runtime Application Self-Protection (RASP) Tools ](https://www.g2.com/categories/runtime-application-self-protection-rasp-tools) --- ## What Are the Most Common Questions About Application Shielding Software? *AI-generated · Last updated: June 3, 2026* ### Application Shielding platforms with proven track records in mobile banking and fintech apps protecting against real fraud attacks Based on G2 reviews, these products are most often mentioned for mobile app protection and fraud defense. - [Appdome](https://www.g2.com/products/appdome) — mobile banking fraud and bot protection. - [DexProtector](https://www.g2.com/products/dexprotector) — Android obfuscation with low app impact. - [Zimperium Mobile Application Protection Suite (MAPS)](https://www.g2.com/products/zimperium-mobile-application-protection-suite-maps) — runtime threat detection for mobile apps. ### Which Application Shielding tools prevent binary reverse engineering while keeping app launch times fast and user experience clean Based on G2 reviews, these products are commonly used to harden apps without heavy user-facing disruption. - [Appdome](https://www.g2.com/products/appdome) — no-code protections with streamlined releases. - [DexProtector](https://www.g2.com/products/dexprotector) — obfuscation with minimal launch impact. - [PreEmptive](https://www.g2.com/products/preemptive) — obfuscation for deploy-time code protection. - [Jscrambler](https://www.g2.com/products/jscrambler) — JavaScript obfuscation with support guidance. ### Application Shielding tools scaling seamlessly across mobile apps handling millions of daily transactions without bottlenecks According to verified users, scalable application shielding is usually tied to low-friction deployment, centralized control, and protections that fit normal release workflows. Reviews in this category repeatedly highlight build-process integration, the ability to apply protections without major code changes, and support for frequent updates across mobile environments. Buyers also point to fast rollout of new controls as threats evolve, especially when security teams need to protect sensitive transactions without creating bottlenecks for development. At the same time, some reviewers note that configuration depth, build limits, or longer compile times can affect implementation pace, so scalability is often about both protection breadth and operational efficiency. ### What are the most important features in application shielding software According to verified users, the most important features in application shielding software center on protecting apps during build time and runtime while keeping delivery practical. Recurring themes in recent reviews include anti-tampering, obfuscation, root or jailbreak detection, anti-debugging, code and binary protection, certificate or SSL pinning, encryption, fraud prevention, bot defense, threat event visibility, and telemetry for investigation. Buyers also value no-code or low-code implementation, support for CI or build workflows, over-the-air policy updates, and dashboards that simplify policy management. Ease of setup matters too, but reviewers often note that advanced configurations still require planning and testing to balance security strength with app performance and user experience. ### How do teams use Application Shielding for release workflows G2 reviewers mention that teams use Application Shielding to add protections as part of normal build and release workflows instead of relying on large engineering rework. In recent reviews, users describe applying hardening, anti-tampering, obfuscation, runtime checks, and fraud controls during build time so apps can move through QA and production with fewer manual steps. This helps security teams test and tune controls without deeply changing source code, while developers keep shipping on regular schedules. Reviewers also connect shielding tools to shorter time to market, easier iteration across releases, and better coordination between security and development. Common friction points include onboarding complexity, documentation gaps, and build-time increases for some implementations.