TrustPin

TrustPin is a certificate pinning platform designed for mobile applications. It pins server public keys inside the TLS handshake and allows remote updates to those pins without requiring app store releases or forced user updates. Core function: - Pins server public keys during TLS handshakes to prevent man-in-the-middle (MITM) attacks - Delivers signed pin configurations to installed apps within minutes of a change - Supports remote certificate rotation without triggering an app store review process SDK support: - Swift SDK for iOS, macOS, watchOS, and tvOS - Android and JVM library - Flutter package - React Native package Security and compliance: - Built to OWASP Mobile Application Security Verification Standard (MASVS) recommendations - ECDSA P-256 signed configurations - TLS 1.2+ in transit, encrypted at rest - Bring Your Own Keys (BYOK) signing option - Hosted in the EU with privacy-focused architecture Enterprise features: - Role-based access control (RBAC) - Single sign-on (SSO) integration - Audit logs for every configuration change - Custom SLA agreements and dedicated infrastructure options - Source-code audits available under NDA Developer tooling: - CLI tools with Homebrew installation and cross-platform binaries - CI/CD pipeline integration - Available via SPM (Swift Package Manager), Maven, and Pub package managers - 5-minute integration with standard HTTP clients Delivery and monitoring: - Global CDN with multi-region redundancy and edge caching - 99.9% uptime SLA on paid plans - Usage analytics, custom alerts, and audit trail - Runtime Application Self-Protection (RASP) available via partnership with Promon Pricing includes a free tier with shared capacity and fair-use limits (no uptime SLA), and paid plans with SLA guarantees.