SaaS service

CalfSec Cloud

Upload an Android package, apply a SKU profile, download a verified delivery ZIP. Inspired by international seal consoles — shipped as a thin SaaS first (quotas + jobs), not a fake full ThreatCast clone.

New protection job

Drop APK / AAB here
Max size per plan · virus scan · short-lived encrypted storage

Profile: Studio · Package: com.example.app · Region: ap-southeast

Open invite console

Now (M2)

Jobs + quota

Async protect, download artifact + report + verify log. Fail closed on prepack shells / feature DEX.

API / CI

Token auth for pipelines. Same engine as CLI — no second packer.

Later

Threat board

Heartbeat signals and policy hooks — Control-layer features after thin SaaS is real.

Invite-only local Cloud: jobs + quota + delivery ZIP. Built to MLPS 2.0 Level-2 engineering baseline. Not evaluated. Not filed. Not SOC2. Not MASA certified. No public self-register. Paddle sandbox later. Industrial pack hooks the Shield engine in a later story.

Console: /console. Production host calfsec.ai724.cn. This wave is Invite structural pack, not the industrial engine. Echoing the upload as the artifact is forbidden.