Appdome launches remote management for live mobile apps

Appdome has launched Remote Management for live Android and iOS apps, allowing authorised teams to update approved protections in published apps without rebuilding or republishing them.

The launch expands Appdome's mobile security offering beyond build-time protection into post-deployment operations. It is aimed at security and engineering teams that need to change how existing defences behave while an app is already in use.

In practice, organisations can change settings tied to protections already embedded in an app. These include keys, certificates, certificate pinning, hosts, APIs and related configurations, as well as approved or blocked domains, endpoints, on-device applications and threat-triggering conditions.

Teams can also adjust the device, application, payload and risk signals an app shares with backend systems. The scope extends to in-app enforcement actions, user messages, data-handling rules and policy responses.

The feature is designed to avoid the usual cycle that can follow even a limited mobile security change. In many cases, that would otherwise require engineers to prepare a new build, submit it for app store review and wait for users to install the latest version.

Governance controls

Each live change follows a request-approve-deploy workflow. One team member submits the requested change and the reason for it, a designated approver reviews the request, and an authorised administrator deploys it after approval.

AI-assisted guidance is included to help teams assess the likely impact of a proposed change and identify conflicts before deployment. The production workflow remains under human control, with separation of duties built into the process.

Every submission, approval, rejection, withdrawal, expiration, acknowledgement and deployment is recorded in Appdome Vault, described as the company's system of record for mobile security and compliance. The audit trail is intended to show what changed, who approved it, when it changed and why.

Appdome distinguishes between changing security controls and distributing new software. Remote Management changes the configuration or behaviour of protections already present in the app, rather than adding new features or executable code outside the standard Apple and Google release processes.

Operational shift

The product reflects a broader effort to give cybersecurity teams more direct operational control over mobile apps in production, while retaining oversight from engineering and compliance functions. Organisations can decide which roles are allowed to request, approve and deploy changes.

According to Appdome, that approach creates a shared operating layer for security and engineering teams. It is intended to help businesses respond more quickly to fraud, bot activity and other threats without removing internal checks on production changes.

Tom Tovar, Co-Creator and Chief Executive Officer at Appdome, said the product is meant to let cyber teams act more directly once they identify a problem.

"Cyber teams should not have to stop at identifying risk; they should be able to act on it. Remote Management expands what cyber can own in production, while keeping the same discipline enterprises expect from any operational change. AI helps teams understand a proposed change, and human approvals, segregation of duties, and a complete record remain in control," said Tovar.

Roy Cohen, Product and Engineering Lead at Appdome, described the feature as an initial step towards a more automated operating model, while keeping people responsible for approvals and deployment decisions.

"With great power comes great responsibility; today, humans control the live update, assisted by AI on Appdome. Tomorrow, agents will request and perform the live updates approved by the humans on Appdome," said Cohen.

Jason Bloomberg, Managing Director at analyst firm Intellyx, said the launch addresses a long-standing tension in mobile security operations. Traditionally, organisations have had to either push users back to app stores for an updated version or let an app accept updates in a way that could introduce other risks.

"Organisations face a dilemma when they need to apply a security patch to a mobile app: either require users to return to the app store to download a new version or instrument the app to accept possibly malicious updates on the fly," said Bloomberg.

"Appdome solves this dilemma with Remote Management, which empowers organizations to update security and other policies on downloaded apps without requiring a trip to the app store or opening up the possibility of additional compromise," he added.

Remote Management is available to Appdome customers licensed for the feature. Appdome's wider platform supports more than 400 mobile app security, anti-fraud, anti-malware, bot defence and API protection functions for Android and iOS apps without software development kits or manual coding.