Product service

CalfSec Shield for Android

Seven core capabilities, each demoable: code hiding & anti-analysis, signature lock, on-demand decrypt & wipe, dual-process mutual guard, device-bound licensing, customer-lib private load chain, Google 16KB readiness. Transparent annual pricing, unlimited builds.

Protect

Code hiding & anti-analysis

Full DEX encryption (SHD1 multi-DEX shell); keys bound to the signing certificate. Wrong-cert resign fails closed — real control, not a sticker.

Transform

Multi-language code VMs

Optional native / VM paths (Java/C/C++/JS) with harden profiles, per-build variation. Delivery includes report KPIs.

Runtime

On-demand decrypt & signature lock

Listed methods decrypt in 8-byte windows on demand, wiped after use (on-device proof); environment & tamper signals fail hard. We ship evidence, not immunity claims.

Play

AAB pipeline

Bundle in → protected AAB out, with App signing vs upload key checklist for Google Play.

Uni

Uni-aware paths

Practical support for Uni-style packaging pitfalls (ClassLoader / asset overlay). Honest JS boundaries.

Deliver

Evidence ZIP

Artifact + pack report + verify log + contract appendix — the same standard for Cloud and service deals.

product.t7

Dual-process mutual guard

The app process and a dedicated guard process bind to each other and revive one another; when either is killed the system rebuilds it via the surviving binding (bidirectional revive verified on device). No claim against force-stop, one-tap cleanup or aggressive OEM battery savers.

product.t8

Device-bound licensing

License signed over a 7-key device fingerprint anchor set (ECDSA P-256), verified key-by-key at runtime; device migration via server re-sign with a count cap and offline grace; tampered anchors refuse to start (on-device: 7/7 match, tamper denied).

Product vs Cloud

	Shield (product / CLI)	Cloud SaaS
Who runs packer	You or our engineers	CalfSec workers
Best when	Private CI, air-gapped	Fast upload/download
Play coaching	Optional add-on	Optional add-on
Threat console	Roadmap	Roadmap (post thin SaaS)

See Cloud SaaS