Skip to content

Common Security Threats

The SDK can surface these kinds of detections in rejectReasons, allRiskFactors, raw scan summaries, or event payloads:

Development and Testing Environment Detections

Section titled “Development and Testing Environment Detections”
  • SIMULATOR_ENVIRONMENT
  • SIMULATOR_RUNTIME
  • EMULATOR_DETECTED
  • DEBUGGER_SYSTEM_CHECK
  • DEBUGGER_PROCESS_CHECK
  • DEBUGGER_EXCEPTION_CHECK
  • FRIDA_DETECTED
  • FRIDA_SERVER_RUNNING
  • COMMON_SUSPICIOUS_PATH
  • VPN_IN_USE
  • ROOT_DETECTED
  • JAILBREAK_DETECTED
  • HOOK_DETECTED
  • TAMPERED
  • REPACKAGED

Detection strings commonly follow this pattern:

DETECTION: <TYPE> <Description>