---
title: "iOS App Security"
description: "Protect your iOS app with DoveRunner — choose between sealing a finished IPA or integrating the SDK into your build pipeline."
---
> For the complete documentation index, see [llms.txt](https://docs.doverunner.com/llms.txt).

DoveRunner Mobile App Security protects iOS apps against reverse engineering, tampering, jailbroken environments, hooking frameworks, and cheat tools — without changing your source code.

There are two ways to apply it. Both produce a protected app; they differ in where protection is applied.

## Choosing an Approach

| | [IPA Sealing](https://docs.doverunner.com/mobile-app-security/ios/ipa-sealing/) | [SDK Sealing](https://docs.doverunner.com/mobile-app-security/ios/sdk-sealing/) |
| :--- | :--- | :--- |
| **What you provide** | A compiled `.IPA` | A project registered by Bundle ID |
| **Where protection is applied** | To the finished binary, in the Developer Console | In your build, through the downloaded SDK |
| **Build pipeline changes** | None | SDK integrated into the build |
| **Signing** | The original signature is invalidated — DoveRunner re-signs for you, or you re-sign the output yourself | Your build signs as usual |
| **Best when** | You want to protect a build you already have | You want protection to run on every build automatically |

  - [IPA Sealing](https://docs.doverunner.com/mobile-app-security/ios/ipa-sealing/)
    Upload a compiled .IPA and download the protected build.
  - [SDK Sealing](https://docs.doverunner.com/mobile-app-security/ios/sdk-sealing/)
    Create a project, download the SDK, and integrate it into your build.
  - [SDK File Structure](https://docs.doverunner.com/mobile-app-security/ios/sdk-file-structure/)
    Understand the files included in the downloaded SDK package.
  - [CI/CD Integration](https://docs.doverunner.com/mobile-app-security/ios/cicd/)
    Automate sealing with Fastlane or Azure DevOps.

## Console Menu

In the Developer Console, **iOS Mobile App Security** has a single row of menus. **Historical Information** and **App Configuration** are shared by both sealing methods.

| Menu | What it is for |
| :--- | :------------- |
| **IPA Sealing** | Upload a compiled `.IPA` and seal it in the console. See [IPA Sealing](https://docs.doverunner.com/mobile-app-security/ios/ipa-sealing/). |
| **SDK Projects** | Create projects and download the SDK for your build. See [SDK Sealing](https://docs.doverunner.com/mobile-app-security/ios/sdk-sealing/). |
| **Historical Information** | Sealing history for both IPA and SDK sealing. See [Historical Information](#historical-information) below. |
| **App Configuration** | Turn the service on or off for each sealed app. See [App Configurations](https://docs.doverunner.com/mobile-app-security/ios/sdk-sealing/#app-configurations). |
| **AiSM** | Download AppSealing iOS SDK Manager (AiSM), a desktop tool that applies the SDK to Flutter, Xamarin, Ionic, Cordova, and React Native projects. |

### Historical Information

**Historical Information** lists every sealing run in one table, whether it was done with IPA Sealing or SDK Sealing.

- **Method** — Filter the list by **All methods**, **IPA**, or **SDK**.
- **From Date** / **To Date** — Limit the list to a date range.
- **Search** — Find runs by app name or Bundle ID.
- **TOTAL / COMPLETED / FAILED / UNIQUE APPS** — Summary tabs that count the runs in the current filter and narrow the list when clicked.
- **EXPORT** / **EXPORT PER APP** — Download the filtered list as a CSV file. **EXPORT PER APP** groups the rows by Bundle ID.
- **Download sealed IPA** — For successful IPA Sealing runs, the download icon in the **Action** column fetches the sealed `.IPA` again. The sealed file is kept only for a limited time; once it has expired, the console shows *This sealed IPA is no longer available to download.* SDK Sealing runs have no download, because the SDK is applied in your own build.

Click a row to expand its service version and creation details.

## Supported Versions

For the iOS releases and React Native versions DoveRunner supports, see [Supported Frameworks](https://docs.doverunner.com/mobile-app-security/console/supported-frameworks/).