thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

OWASP Mobile Application Security Verification Standard (MASVS)

OWASP's standard of security requirements for mobile apps, organized into control groups and verified with the MASTG.

Definition

MASVS v2 groups controls as MASVS-STORAGE, -CRYPTO, -AUTH, -NETWORK, -PLATFORM, -CODE, -RESILIENCE and -PRIVACY. Instead of fixed levels, v2 uses testing profiles: L1 baseline, L2 for defense in depth for sensitive apps and R for resilience against reverse engineering and tampering.

Example

A banking app is assessed against MASVS L2 plus the R profile for anti-tampering.

Exam tip

MASVS defines what to verify for mobile; MASTG explains how to test it.

Related terms