OWASP MASVS

1. MASVS-STORAGE

   Secure storage of sensitive data on the device and leakage via backups, logs and keyboard caches.

2. MASVS-CRYPTO

   Cryptography usage, key management and randomness in mobile apps.

3. MASVS-AUTH

   Authentication and authorization, biometrics and local authentication.

4. MASVS-NETWORK

   TLS enforcement, certificate pinning and secure network communication.

5. MASVS-PLATFORM

   IPC, WebViews, deep links and platform API interaction.

6. MASVS-CODE

   Code quality, third-party libraries, input handling and update enforcement.

7. MASVS-RESILIENCE

   Anti-tampering, obfuscation, root detection and reverse engineering resistance.

8. MASVS-PRIVACY

   Data minimization, transparency, user control and privacy of collected data.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.