TrustPin

TrustPin is a cloud-based certificate pinning management platform designed for mobile application developers and security teams. The platform addresses a specific challenge in mobile security: the traditional process of updating SSL/TLS certificate pins in mobile apps requires releasing new app versions, going through app store review cycles, and waiting for user adoption — a process that can take two to four weeks. TrustPin provides an SDK-based approach that allows developers to integrate certificate pinning once and then manage certificate updates remotely through a web dashboard or CLI, without requiring new app releases. When certificates are rotated, changes propagate via a global CDN to all active app instances in seconds, eliminating downtime and coverage gaps. Core capabilities include: - Remote management of public-key pins using SPKI (Subject Public Key Info) hashing with SHA-256 or SHA-512. Cryptographically signed configurations. - Bring Your Own Keys (BYOK), and Bring your Own CDN. - Native SDKs for iOS (Swift Package Manager), Android (Kotlin/Maven), and Flutter (Dart/pub.dev) - A CLI tool for DevSecOps pipeline automation - Role-based access control and audit logs for team collaboration - OWASP Mobile Security Testing Guide-compliant implementation - No end-user PII collected The platform is hosted on EU infrastructure and is described as aligned with GDPR and CCPA principles. It offers a free tier with no credit card requirement, and paid plans include a 99.9% uptime SLA with service credits. Enterprise plans with custom pricing and dedicated support are also available. TrustPin's primary security purpose is to protect mobile applications against man-in-the-middle (MitM) attacks by ensuring apps only accept connections from servers presenting pre-approved certificates, even if an attacker holds a certificate from a compromised certificate authority.