Kensei

Kensei is a free SAST tool for mobile Flutter applications (SAST stands for Static Application Security Testing).

Kensei runs locally and detects security issues in your source code.

Below are some examples of issues that can be detected.

Network configuration issues:

+ disabled ATS (iOS).

+ allowed clear text traffic (Android).

Binary protection misconfigurations, decreasing resilience to a reverse engineering:

+ enabled debuggable mode,

+ disabled ARC,

+ disabled PIE,

+ disabled PIC.

Sensitive data protection issues that can lead to non-authorized access to data:

+ enabled backup mode.

+ vulnerability to task hijacking attack.

Security misconfiguration issues:

+ vulnerable 3rd party libraries.

+ outdated 3rd party libraries.