Product
CalfSec Shield
Industrial Android hardening: shell, optional Dex2C/VMP, string/resource options, Uni-aware paths, AAB merge pipeline.
CalfSec
Android hardening
that ships to Play
Protect APK and AAB builds with a verifiable shell, Dex2C/VMP options, and RASP-style integrity — then deliver through Cloud SaaS or assisted professional service. Built for teams who outgrew R8 but do not need an opaque enterprise quote on day one.
APK + AAB Play App Signing aware
Evidence ZIP report + verify log
Honest limits no fake certs
Current product status
Honest snapshot for buyers and partners. Official MASA is not obtained.
AL1 lab materials ready
Official MASA: NOT_CERTIFIED
Product-line score 81.6
One brand. Two ways to buy.
Modeled after leading international sites: a product story plus a Cloud console path — without pretending we are already ThreatCast-scale.
SaaS
CalfSec Cloud
Upload → protect → download with quotas. Thin SaaS first; monitoring and policy arrive on the published roadmap.
Service
Play coaching
Assisted Trial packs with Play App Signing checklist and one remote session — for teams shipping overseas.
How Cloud works
Aligned with DoveRunner-style seal workflows — adapted to our Android-first engine.
01Create project & bind package name
02Upload APK or AAB
03Protect with SKU profile
04Download ZIP + verify report
Transparent pricing
Public USD tiers — unlike quote-only enterprise vendors.
| Plan | Price | Best for |
|---|---|---|
| Trial | $149–$399 | One package assessment |
| Indie | $1,490/yr | Single app, steady releases |
| Studio | $4,900/yr | Small team + harden reports |
| Business | $12k–$18k/yr | Private path + priority |
Claims boundary: Soft-CFF is not OLLVM. We do not claim Frida/Stalker immunity, DexGuard parity, or completed GDPR / 等保 / MASA certification. Evidence paths available on request.