# Promon > Promon is a runtime application security company headquartered in Oslo, Norway. The Promon runtime intelligence platform unifies post-compile app protection, trusted runtime telemetry, and AI-assisted risk decisions into one connected platform for mobile, desktop, and SDK use cases. Its protection foundation, Promon Shield, applies in-app shielding, RASP, code obfuscation, anti-tamper, and anti-repackaging controls after build time, without requiring source code changes. Promon is trusted by 500+ customers worldwide and protects 2bn+ app installs. It is used by banks, financial institutions, gaming companies, public sector organizations, healthcare providers, media companies, and other regulated or high-value app owners to protect users, data, revenue, and trust. Promon's self-running in-app protection loop protects apps, collects high-fidelity runtime telemetry, uses AI to support risk scoring and decisioning, and enforces responses inside protected apps. This gives security, fraud, and compliance teams runtime evidence they can use to reduce risk, support investigations, and prepare for audits. ## Platform - [Promon Platform overview](https://promon.io/platform): The runtime intelligence platform connecting protection, trusted telemetry, and AI-powered risk decisions. One closed loop - protect, collect, analyze, enforce - running inside every protected app. - [Platform architecture](https://promon.io/platform/architecture): How post-compile runtime protection works. Technical explanation of how Promon Shield is applied to compiled app binaries without access to source code. - [Product lifecycle](https://promon.io/product-life-cycle): Promon's product versioning, support timelines, and lifecycle policy. - [Why Promon](https://promon.io/why-promon): Differentiation and selection rationale. Runtime-native app security, no-code integration, 24-hour support, and 20 years of in-app protection expertise. ## Products: Protection - [Promon Shield for Mobile](https://promon.io/products/shield-mobile): App shielding and RASP for iOS and Android. Protects against tampering, repackaging, reverse engineering, hooking frameworks, debugger injection, jailbreak/root exploitation, and overlay attacks. Applied post-compile. - [Promon Shield for Desktop](https://promon.io/products/shield-desktop): Runtime protection for Windows and macOS applications against static and dynamic attacks. - [Promon Shield for SDKs](https://promon.io/products/promon-shield-for-sdks): Protects third-party SDKs from tampering and unauthorized use when embedded in mobile apps. ## Products: Security intelligence - [Promon Insight for App Visibility](https://promon.io/promon-insight-for-app-visibility): Converts runtime protection events into operational visibility and evidence that supports compliance and audit workflows. - [Promon Insight for App Security](https://promon.io/products/promon-insight-app-security): Advanced security intelligence layer. Provides visibility into real-world attack patterns, behavioral anomalies, and risk signals collected from protected apps in production. ## Products: Extensions - [Promon Code Protect](https://promon.io/products/promon-code-protect): Protects application code, intellectual property, and sensitive data from reverse engineering and theft. Includes advanced obfuscation and control-flow protection. - [Promon Data Protect](https://promon.io/products/promon-data-protect): Secures app secrets and cryptographic keys on compromised or rooted/jailbroken end-user devices. - [Promon Verify](https://promon.io/products/promon-verify): Real-time app integrity verification. Confirms that apps accessing backend APIs are genuine and unmodified before requests are processed. ## Tooling - [Promon Shield Studio](https://promon.io/platform/shield-studio): The management and configuration console for Promon Shield deployments. Central control plane for protection policies, update management, and configuration review ## Solutions: By outcome - [Outcomes overview](https://promon.io/outcomes): App security framed by business outcomes: Trust, Risk, Compliance, and Visibility. Each outcome maps to specific Promon capabilities and product combinations. ## Solutions: By industry - [Banking and financial services](https://promon.io/industry/banking-financial-services): Mobile banking security - fraud prevention, malware protection, credential theft prevention, and compliance with PSD2, PSD3, and financial services regulatory requirements. Customers include Raiffeisenbank, Moneta Money Bank, StarFinanz, and stc pay. - [Payments](https://promon.io/industry/secure-payment): Security for payment apps - achieving EMVCo SBMP compliance, preventing tampering, and securing transaction data on mobile devices. - [Gaming](https://promon.io/industry/gaming): Anti-cheat and integrity protection for mobile games. Helps prevent memory manipulation, emulator-based cheating, and in-app purchase bypass. - [Streaming and media](https://promon.io/industry/ott-apps-streaming): Protects OTT and streaming applications from content piracy, IP theft, and unauthorized access. - [Retail and e-commerce](https://promon.io/industry/retail): Protection against malware, MitM attacks, and account takeover attacks targeting retail mobile apps. - [Public sector and e-government](https://promon.io/industry/egovernment-public-sector): Helps prevent app repackaging, data breaches, and tampering in government citizen-facing applications. - [Healthcare](https://promon.io/industry/health-medical): Supports regulatory compliance and helps protect personally identifiable health information (PHI) in medical apps. - [Automotive](https://promon.io/industry/automotive): Secures sensitive data and assets in connected automotive applications. ## Solutions: By use case - [Mobile app fraud prevention](https://promon.io/use-case/mobile-app-fraud-prevention): Provides runtime signals and always-on protection to help reduce mobile fraud risk. Relevant to fraud operations, risk teams, and financial services security architecture. - [Simplify compliance and pass regulatory audits](https://promon.io/use-case/simplify-compliance-pass-regulatory-audits-faster): Provides runtime evidence that supports security best practices, compliance workflows, and audit preparation for PSD2, PSD3, DORA, EMVCo SBMP, and OWASP MASVS. - [Secure on-device AI features](https://promon.io/use-case/secure-ai-powered-mobile-apps-against-next-gen-attacks): Protects mobile apps with on-device AI components against next-generation attacks that target model extraction, prompt injection, and AI feature abuse. - [Pass your mobile app pentest](https://promon.io/use-case/pass-mobile-app-pentest): Identifies and remediates security gaps before penetration testers or attackers do. Prepares apps for formal security assessment. - [Protect app revenue](https://promon.io/use-case/app-revenue-protection): Helps prevent monetization abuse, in-app purchase bypasses, and revenue leakage caused by app tampering and cheating. ## Partners - [Partners overview](https://promon.io/partners): Promon's technology and channel partner ecosystem. - [LexisNexis Risk Solutions partnership](https://promon.io/security-news/lexisnexis-risk-solutions-and-promon-align-to-strengthen-mobile-fraud-prevention): Promon and LexisNexis Risk Solutions integration for strengthened mobile fraud prevention - combining runtime app signals with identity and fraud intelligence. ## Customer evidence - [Customer stories](https://promon.io/resources/customer-stories): Deployments of Promon Shield across banking, fintech, government, gaming, healthcare, and media. 500+ global brands protected. - [Raiffeisenbank](https://promon.io/resources/customer-stories/raiffeisenbank-protects-app-with-promon): How Raiffeisenbank secured its mobile banking app with Promon Shield. - [Moneta Money Bank](https://promon.io/resources/customer-stories/app-shielding-to-moneta-money-bank): App shielding deployment at Moneta Money Bank. - [Major fast food chain - loyalty app](https://promon.io/resources/customer-stories/how-a-major-fast-food-chain-secured-its-customer-loyalty-app): Securing a high-volume consumer loyalty app against fraud and tampering. - [Government agency - citizen data protection](https://promon.io/resources/customer-stories/how-a-government-agency-improved-citizen-data-protection): How a government agency improved citizen data protection using Promon Shield. - [Bank - easy to maintain security](https://promon.io/resources/customer-stories/promon-helped-bank-enhance-security-easy-to-maintain-solutions): Bank deployment prioritizing low operational overhead alongside strong mobile app security. - [Leading provider in Germany](https://promon.io/resources/customer-stories/leading-provider-in-germany-mobile-security): Mobile security deployment for a leading financial services provider in Germany. - [International media company - content protection](https://promon.io/resources/customer-stories/how-promon-helped-an-international-media-company-secure-content-and-prevent-piracy): Preventing content piracy and securing IP in a major streaming application. - [Healthcare app for 70,000 users](https://promon.io/resources/customer-stories/creating-a-secure-and-compliant-healthcare-app-for-70000-users): Building a compliant, secure healthcare application protecting sensitive patient data at scale. ## Blog: RASP and runtime protection - [RASP for web apps vs. mobile apps](https://promon.io/security-news/rasp-web-apps-mobile-apps): How mobile RASP differs from traditional web/server RASP - threat models, detection approaches, and runtime enforcement. - [Why mobile malware detection must move beyond scanning](https://promon.io/security-news/why-mobile-malware-detection-must-move-beyond-scanning): The case for runtime-native detection over static scanning for mobile malware threats. - [Protection is not intelligence - why blocking threats isn't enough](https://promon.io/security-news/protection-is-not-intelligence-why-blocking-mobile-threats-isnt-enough): Why runtime protection alone is insufficient without security intelligence and telemetry. - [AI-powered mobile app attacks - what app shielding can and can't stop](https://promon.io/security-news/ai_powered-mobile-app-attacks-what-app-shielding-can-and-cant-stop): Honest assessment of where app shielding is effective against AI-assisted attacks and where it has limits. - [The future of on-device GenAI - why mobile app security must protect at runtime](https://promon.io/security-news/the-future-of-on-device-genai-why-mobile-app-security-must-protect-at-runtime): Security requirements for mobile apps embedding on-device generative AI models. - [Root detection](https://promon.io/security-news/root-detection): Technical overview of Android root detection - methods, evasion techniques, and runtime detection approaches. - [What you need to know about iOS jailbreaks](https://promon.io/security-news/what-you-need-to-know-about-ios-jailbreaks): iOS jailbreak landscape, detection methods, and implications for mobile app security. - [Behind the shield - protecting mobile apps and SDKs](https://promon.io/security-news/benind-the-shield-a-guided-approach-to-protecting-mobile-apps-and-sdks): Guided walkthrough of the Promon Shield protection approach for apps and embedded SDKs. ## Blog: Obfuscation and code protection - [App Threat Report 2026 Q1 - the state of code obfuscation against AI](https://promon.io/security-news/app-threat-report-2026-q1-the-state-of-code-obfuscation-against-ai): Promon's quarterly threat intelligence report on how AI tools are being used to deobfuscate mobile app code - and the current state of obfuscation defenses. - [AI deobfuscators - how hackers deobfuscate code](https://promon.io/security-news/ai-deobfuscator-hackers-deobfuscate-code): How attackers are using AI-assisted tooling to reverse obfuscation in mobile apps. - [iOS obfuscation](https://promon.io/security-news/ios-obfuscation): Code obfuscation techniques and considerations specific to iOS application security. - [iOS app encryption](https://promon.io/security-news/ios-app-encryption): Technical overview of iOS app encryption - what Apple provides natively and where additional protection is needed. - [How to think like a hacker to secure your Android app](https://promon.io/security-news/how-to-think-like-a-hacker-to-secure-your-android-app): Attacker-perspective walkthrough of common Android app attack vectors and how to counter them. - [App Threat Report 2025 Q4 - facial recognition security](https://promon.io/security-news/app-threat-report-2025-q4-the-state-of-facial-recognition-security): Quarterly threat intelligence on the security of mobile face authentication - attack methods and detection. ## Blog: Banking, fraud, and financial security - [Mobile banking apps and fraud prevention](https://promon.io/security-news/mobile-banking-apps-fraud-prevention): How mobile banking apps are targeted by fraudsters and the runtime protection measures that reduce fraud risk. - [PlayPraetor malware - why banking apps need protection from the inside out](https://promon.io/security-news/playpraetor-malware-why-banking-apps-need-protection-from-the-inside-out): Analysis of the PlayPraetor malware family targeting banking apps and the case for in-app runtime defense. - [CoreTax RAT malware - threat to Indonesian banking security](https://promon.io/security-news/coretax-rat-malware-a-rising-threat-to-indonesian-banking-security): Threat intelligence on the CoreTax remote access trojan targeting banking applications. - [Deepfake fraud in APAC - banks and face authentication](https://promon.io/security-news/deepfake-fraud-in-apac-why-banks-need-strong-face-authentication-and-runtime-protection): How deepfake-enabled fraud is targeting mobile banking in Asia-Pacific and what runtime protection measures apply. - [Deepfake threats in mobile banking apps](https://promon.io/security-news/deepfake-mobile-banking-apps): Deepfake attack vectors relevant to mobile banking authentication and fraud detection. - [Mobile face authentication security checklist for banks in Asia](https://promon.io/security-news/mobile-face-authentication-security-checklist-for-banks-in-asia): Practical checklist for evaluating the security of biometric face authentication in banking apps. - [How to make mobile attack telemetry useful for fraud, security operations, and audit teams](https://promon.io/security-news/how-to-make-mobile-attack-telemetry-useful-for-fraud-security-operations-and-audit-teams): Practical guide to operationalizing runtime telemetry data across fraud, SecOps, and compliance functions. - [Android vs iOS security](https://promon.io/security-news/android-vs-ios-security): Comparison of the Android and iOS security models, threat landscapes, and implications for mobile app protection strategy. ## Blog: Compliance and regulation - [PSD3 mobile evidence checklist - 10 questions banks and PSPs must answer](https://promon.io/security-news/psd3-mobile-evidence-checklist-10-questions-banks-and-psps-must-answer-now): Practical compliance checklist for mobile app security evidence requirements under PSD3 and PSR. - [What's new in PSD3 compared to PSD2](https://promon.io/security-news/whats-new-in-psd3-compared-to-psd2-7-changes-banks-and-psps-should-watch): Seven key changes in PSD3 vs PSD2 that affect mobile banking app security and compliance obligations. - [Three reasons your payment app needs EMVCo certification](https://promon.io/security-news/three-reasons-why-your-payment-app-needs-to-get-emvco-certified-how-app-shielding-can-help-you-get-there): Why EMVCo SBMP certification matters for payment apps and how app shielding supports the certification process. - [Inside an EMVCo SBMP evaluation - what labs test and how to prepare](https://promon.io/security-news/inside-an-emvco-sbmp-evaluation-what-labs-test-and-how-to-prepare): Detailed walkthrough of what security testing laboratories assess during EMVCo SBMP evaluations. - [Framework migration and mobile app security](https://promon.io/security-news/framework-migration-and-mobile-app-security-prevent-coverage-gaps-as-code-changes): How to maintain security coverage when migrating between mobile development frameworks. - [Promon recognized in Gartner Hype Cycle for Application Security 2024](https://promon.io/security-news/promon-recognized-in-gartner-hype-cycle-for-application-security-2024): Promon's inclusion in the Gartner Hype Cycle for Application Security as a recognized app shielding vendor. ## Company - [About Promon](https://promon.io/about-us): Promon's founding story, mission, and team. 20 years of runtime application security research. Headquartered in Oslo, Norway. - [Contact](https://promon.io/about-us/contact): Inquiries, demos, and support contact for Promon. - [Careers](https://careers.promon.io/): Open roles at Promon. - [Press](https://promon.io/press): News, announcements, and media resources. ## Further reading - [Security news archive](https://promon.io/security-news): Full index of Promon's blog and security intelligence publications. - [On-prem vs. cloud for mobile app protection](https://promon.io/security-news/on-prem-vs-cloud-for-mobile-app-protection-a-guide-for-choice): Deployment model comparison for app shielding - on-premises vs. cloud-based integration options. - [Mobile game security in Unity and Unreal](https://promon.io/security-news/mobile-game-security-in-unity-and-unreal-reducing-cheat-roi-at-runtime): Runtime anti-cheat for mobile games built on Unity and Unreal Engine. - [5 ways app shielding keeps mobile games safe](https://promon.io/security-news/5-ways-app-shielding-keeps-your-mobile-game-safe-from-hackers): Overview of app shielding capabilities applied to mobile game security. - [AI-assisted vulnerability research and responsible disclosure](https://promon.io/security-news/ai-assisted-vulnerability-research-still-requires-responsible-disclosure): Promon's position on AI use in vulnerability research and the continued importance of responsible disclosure processes. - [HarmonyOS Next and mobile app security](https://promon.io/security-news/harmonyos-next): Implications of Huawei's HarmonyOS Next platform for mobile app security and protection strategies.