HomeStandards › NIST 800-163 (App Vetting)

Framework

NIST 800-163 and mobile app vetting

What is NIST 800-163?

NIST Special Publication 800-163 is guidance for vetting mobile apps before they are approved for use. It describes a process for checking an app's security and behaviour, often used by organisations and government bodies that need confidence in the apps their people run.

The technical part of vetting looks at how the app handles data, what it sends over the network, what permissions it uses and what risks its code and libraries carry.

How Mobexa helps

Mobexa performs the technical analysis that app vetting relies on, from static and dynamic testing to a software bill of materials, and produces clear, exportable results. That gives a vetting process consistent evidence about each build rather than a one-off manual review.

Common questions

Who uses NIST 800-163?
It is commonly used by organisations and government bodies that need to approve mobile apps before deployment. It describes the vetting process; Mobexa provides the technical analysis behind it.

Mobexa maps every finding on your Android and iOS builds to NIST 800-163 (App Vetting) and the other standards an auditor recognises.

Start Free Trial