If a mobile app leaves API keys on the device, skips certificate pinning, or stores sensitive data without jailbreak/root checks, users and the organization are both at risk. Mobile application security testing reviews local storage, traffic, authentication, and reverse-engineering surface on Android and iOS builds you provide. A store release, MDM rollout, or a new payment flow puts this work on the agenda. The test does not automatically cover every store version; packages and accounts are chosen in writing.
TARGON does not sell mobile pentest as a scan detached from web and API work. The technical team reads the client with the backend contract and splits which layer must be fixed. Authorization, test devices, the build you supply, and privacy limits are agreed first. Taking mobile security testing from TARGON means a pentest-style delivery (evidence, risk, remediation); scope is redrawn per project.