SaaS service

CalfSec Cloud

Upload an Android package, apply a SKU profile, download a verified delivery ZIP. Inspired by international seal consoles — shipped as a thin SaaS first (quotas + jobs), not a fake full ThreatCast clone.

New protection job

Drop APK / AAB here
Max size per plan · virus scan · short-lived encrypted storage

Profile: Studio · Package: com.example.app · Region: ap-southeast

Open invite console

Now (M2)

Jobs + quota

Async protect, download artifact + report + verify log. Fail closed on prepack shells / feature DEX.

API / CI

Token auth for pipelines. Same engine as CLI — no second packer.

Later

Threat board

Heartbeat signals and policy hooks — Control-layer features after thin SaaS is real.

Invite-only Cloud: job submission + delivery ZIP. Industrial pack hooked. Browser login via Keycloak idp.ai724.cn (no public signup, no per-build sales; contact vendor for trial invites).

Console: /console. Production host calfsec.ai724.cn. Industrial pack is hooked from the sibling repo. Customer keystores are not accepted. Echoing the upload as the artifact is forbidden.