OWASP MASTG
The OWASP Mobile Application Security Testing Guide is the companion manual to MASVS, describing concrete procedures for verifying each requirement on Android and iOS.
Where MASVS says what must be true, MASTG says how to establish it — which files to inspect, which traffic to capture, which platform APIs to exercise, and what constitutes evidence.
Many MASTG procedures assume an instrumented device. Procedures relying on dynamic observation are precisely those an application frustrates when it detects the instrumentation.
Related terms
- OWASP MASVS — The OWASP Mobile Application Security Verification Standard is a framework that defines what a mobile application must satisfy to be considered secure, organised into control groups covering storage, cryptography, authentication, network, platform interaction, code quality and resilience.