What it checks
Mobile Static Analysis inspects an uploaded APK or IPA for hardcoded secrets, App Transport Security (ATS) / cleartext-traffic misconfiguration, insecure storage flags, exported-component exposure, and sensitive permission declarations.
Because the artifact is analyzed offline, this is the one BreakMesh package that runs with zero requests to the target itself — everything comes from the uploaded file.
Upload limits
Files up to 100MB are accepted. Analysis is bounded to keep results fast and predictable: at most 5,000 entries are scanned per archive, and secret-pattern scanning is capped per file.