Threat Modeling (Mobile)

Threat modeling is the practice of working out what could go wrong with an app before, or alongside, building it. You map what the app does, what data it holds, who might attack it and how, then decide which risks to design against.

For mobile, a threat model accounts for the fact that the app runs on a device you do not control. It guides where to focus testing, so effort goes to the exposures that actually matter for your app.