This documentation is also available as markdown. For a complete index of all pages, see llms.txt at /llms.txt

Real Time Threat Analysis

Real Time Threat Analytics shows detections from a protected app as they arrive, over a rolling window described in the console as Real Time Hacking Detection for last 60 mins. Use it while reproducing an attack, or when you need to see whether something is happening right now rather than what happened last month.

Open Mobile App Security → Analytics → Real Time Threat Analytics.

Filters

Filter	Description
Operating System	`Android` or `iOS`.
Application	The app to watch. Type to search by name or package name.
Refresh Rate	How often the page pulls new data: `1 MIN`, `5 MIN`, or `10 MIN`.

Widgets

Summary

A header card naming the selected app and package, with two counters for the window:

Hacking Attempts
Unique Devices Hacking Attempts

Popular Insights

The single most frequent value in each dimension during the window, giving you the shape of what is happening at a glance:

Insight	Meaning
Hacking Type	The threat category seen most often.
Location	The country producing the most detections.
Device	The device model producing the most detections.
Emulator	Whether emulator environments are involved.
Rooting Enabled	Count of detections from rooted devices.

Hacking Types Streaming

Detections plotted against time across the window, so you can see bursts as they happen.

Protected Unique Devices Data

Distinct devices reporting over the same window, plotted on the same time axis. Compare it with the chart above: a rising attempt count on a flat device count means a small number of devices generating a lot of traffic.

Hacking Attempts By Map Overlay

A world map of the window’s detections, with a table beneath it:

Column	Meaning
Country	Country the detections came from.
Hacking Attempts	Detections from that country.
Unique Devices Hacking Attempts	Distinct devices behind them.

List of Hacking Attempts

The individual detections in the window. FILTER narrows the list and EXPORT downloads it.

Columns are grouped into Device Details, Hacking Details, and Action:

Column	Group	Meaning
Reported On	Device Details	When the detection was reported.
AppSealing Version	Device Details	Sealing version the app was built with.
Android Id	Device Details	The device’s SSAID.
Model Name	Device Details	Device model.
Android Version	Device Details	OS version.
App Version	Device Details	Version of your app.
Country	Device Details	Where the detection came from.
Attempts	Hacking Details	Number of attempts in the entry.
Emulator	Hacking Details	Whether an emulator was detected.
Rooting	Hacking Details	Whether the device is rooted.
Hacking Type	Hacking Details	The threat category.