RASP on Mobile

RASP makes an app defend itself at runtime: notice it is on a rooted phone, a debugger or Frida attached, or its own code patched, and refuse to run. Promon SHIELD, GuardSquare and Digital.ai/Arxan all sell versions of it. The assessor question is never whether it can be beaten in theory, but whether a deployment holds and where one edit could remove it. Here is what RASP checks, how to validate it on an app you are authorized to test, and how to build it resiliently.