Talsec

Talsec develops a mobile, web and API security SDK marketed as the Full App Safety Suite. The suite combines several components: RASP+ (Runtime Application Self-Protection), AppiCrypt (an app integrity cryptogram), an App Hardening SDK, Malware Detection, and AppiCryptWeb for browser-based protection. Together the products are positioned to counter reverse engineering, app cloning, rooting and jailbreaking, Frida hooking, tampering, emulators, malware, bots, API abuse and man-in-the-middle attacks.

RASP+ is described as a commercial-grade runtime protection layer with SDK obfuscation, root and jailbreak detection, runtime reverse-engineering and integrity controls, device OS security status checks, UI protection and remote SDK configuration, aimed at banking-grade regulatory and best-practice requirements. AppiCrypt applies zero-trust principles so that a backend can verify client app and mobile OS integrity, compute an online risk score, and filter malicious calls at the API gateway or in backend application logic; it also guards against RASP bypass attempts and addresses botnets, JSON injection and session hijacking. The App Hardening SDK includes a Secret Vault that dynamically provisions secrets instead of hardcoding them, plus dynamic TLS certificate pinning. Malware Detection scans devices for blocklisted apps, apps installed from untrusted stores or side-loaded, counterfeit clones and apps requesting risky permissions, reporting and logging findings back to the app.

AppiCryptWeb is a WebAssembly-based in-browser security agent that attaches a signed cryptogram containing a browser fingerprint to each API request, attesting to browser runtime integrity, device state and request legitimacy. It is described as producing a stable browser fingerprint without cookies or invasive tracking, operating without CAPTCHAs, detecting tampering, bots and automation, private browsing mode and developer tools, and integrating with NGINX, Cloudflare Workers, AWS API Gateway and similar infrastructure via two frontend calls and one backend validation.

Business model

Software vendor selling security SDKs to application developers and operators, using a freemium and subscription model with tiered SLAs.

Tiered subscription plans: freeRASP and freeMalwareDetection at no charge with fair-usage limits and no SLA; RASP+ Starter at €284 per month for up to 10K app downloads with a Bronze SLA; Full App Safety Suite Starter at €648 per month for up to 10K app downloads including RASP+, hardening, AppiCrypt and anti-malware; and a Full App Safety Suite Business tier with flexible download limits, Silver or Gold SLA and pricing on request. Monthly pay-as-you-go billing, a price calculator and a money-back guarantee are offered.

Traction

The website reports more than 2 billion protected devices and over 5,000 protected apps, and cites recognition from Ernst & Young with the Cyber Space Innovation trophy for AppiCrypt.

Latest developments

Release of the Talsec App Security Portal, and availability of AppiCryptWeb, a WebAssembly-based in-browser security agent for API request integrity.