# PSecure (Paw Security) — runtime application protection for web, mobile, game and desktop apps

> PSecure, also called Paw Security, is the application-security product of Paw Mask (https://pawmask.com). It is a subscription security layer that runs inside the customer's application and detects or blocks tampering, repackaging, reverse engineering, hooking, debugging, emulators/root/jailbreak, cheats and automated abuse at runtime. One console and one policy model cover every platform. Current release: 0.1.0-beta. SDKs are distributed privately during the beta (not published on npm / Maven / CocoaPods).

Pricing is not published. There is no self-service sign-up or free trial: organisations request access through https://psecure.pawmask.com/contact and the PSecure team provisions the account, then customers sign in at /login.

## What it protects

- Android (Kotlin / Java / NDK) — package `com.pawmask.psecure`: repackaging & signature checks, root/Magisk/emulator detection, Frida/Xposed/LSPosed hooks, overlay & accessibility malware.
- iOS (Swift / Objective-C) — `PSecureIOS`: jailbreak (including rootless), debugger, Frida/Substrate hooks, code-signature and integrity checks.
- Flutter (dart:ffi) and React Native (`@pawmask/psecure/adapters`) — one policy for iOS + Android, bundle integrity.
- Unity (IL2CPP / Mono) and Cocos — memory editing, speed hacks, modded clients, emulator / bot farms.
- Desktop (Windows / macOS / Linux, Electron / Tauri) — anti-debug, injection guard, binary integrity.
- Web — browser-side shield and request sealing.

All SDKs initialise with a server-signed lease: `initialize(leaseToken, serverPublicKey)`. Device-risk verdicts are reported to the customer's backend so the backend decides what a risky session may do.

## How onboarding works

1. Request access; the PSecure team provisions your organisation. Then register one application per platform in the console and choose a telemetry region.
2. Add the SDK / agent to the build.
3. Run in Monitor mode, review what would be blocked, then switch rules to Block per app, route or device-risk level without shipping a new release.

## Pages

- Home: https://psecure.pawmask.com/
- Platforms: https://psecure.pawmask.com/platform
- Solutions by industry (fintech, e-commerce, gaming, super-apps): https://psecure.pawmask.com/solutions
- Request access / contact: https://psecure.pawmask.com/contact
- Documentation: https://psecure.pawmask.com/docs
- Trust center (compliance, DPA, sub-processors): https://psecure.pawmask.com/trust
- Customer login (provisioned accounts only): https://psecure.pawmask.com/login
- Customer console: https://psecure.pawmask.com/console

Languages: English, Tiếng Việt, 中文 (switch in the top bar, or call the `psecure_set_language` WebMCP tool).

## For AI agents (WebMCP)

This site registers tools through `navigator.modelContext` (WebMCP) and exposes the same tools at `window.__PSECURE_MCP__` (`listTools()`, `callTool(name, args)`):

- `psecure_get_overview` — product summary, platforms, industries, onboarding.
- `psecure_get_platform` — features + integration snippet for `web | ios | android | cross | game | desktop`.
- `psecure_capability_matrix` — which capability is available on which platform.
- `psecure_list_pages`, `psecure_get_page_context` — site map and current page.
- `psecure_navigate`, `psecure_set_language` — move around the site.

Machine-readable manifest: https://psecure.pawmask.com/.well-known/mcp.json

## Related

- Paw Mask (parent platform): https://pawmask.com
- Paw Mask llms.txt: https://pawmask.com/llms.txt