# Runtime Vulnerability Analytics on mobile applications

**URL:** <https://community.dynatrace.com/t/runtime-vulnerability-analytics-on-mobile-applications/51672>\
**Category:** Open Q&A\
**Tags:** application-security, mobile-monitoring\
**Created:** [May 16, 2025, 8:32am UTC](https://community.dynatrace.com/t/runtime-vulnerability-analytics-on-mobile-applications/51672 "2025-05-16T08:32:18Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![g\_kat](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/g_kat/32/34573_2.png) [@g\_kat](https://community.dynatrace.com/u/g_kat)\
**Post date:** [May 16, 2025, 8:32am UTC](https://community.dynatrace.com/t/runtime-vulnerability-analytics-on-mobile-applications/51672/1 "2025-05-16T08:32:18Z")

</div>

Hi,

Is Dynatrace’s RVA(Runtime Vulnerability Analytics) applicable to mobile applications? I would guess not since I haven’t seen any indication to it being possible, so I started wondering if it even makes sense to extend Application Security to mobile Applications under the current mobile monitoring scheme.

Is there any way this can be approached, or does it need a complete redesign of the mobile SDKs?

Thanks,

George

---

<div class="post-metadata">

**Author:** ![Thomas\_Wirth1](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/thomas_wirth1/32/1776_2.png) [@Thomas\_Wirth1](https://community.dynatrace.com/u/Thomas_Wirth1)\
**Post date:** [May 16, 2025, 12:50pm UTC](https://community.dynatrace.com/t/runtime-vulnerability-analytics-on-mobile-applications/51672/2 "2025-05-16T12:50:40Z")

</div>

Hey g\_kat

No, Runtime Vulnerability Analytics is not available for mobile platforms. Here is a [link](https://docs.dynatrace.com/docs/secure/application-security#tech) to the supported technologies.

---

<div class="post-metadata">

**Author:** ![PierreGutierrez](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/pierregutierrez/32/5934_2.png) [@PierreGutierrez](https://community.dynatrace.com/u/PierreGutierrez)\
**Post date:** [May 16, 2025, 2:45pm UTC](https://community.dynatrace.com/t/runtime-vulnerability-analytics-on-mobile-applications/51672/3 "2025-05-16T14:45:51Z")

</div>

Hello&nbsp;[@g\_kat](https://community.dynatrace.com/user/34133)

To complement what Thomas mentioned

**The Runtime Vulnerability Analytics feature is not applicable to mobile application monitoring, as it relies on OneAgent to analyze security at the system process and Process Group level, which is not part of the mobile instrumentation workflow.**

Although technologies such as Java or .NET can be used in mobile front-end development, mobile application monitoring in Dynatrace is performed through automatic or manual instrumentation via the Mobile SDK, which sends data directly to Dynatrace through an ActiveGate.

In this mentioned workflow, neither OneAgent nor the host process layer are involved, therefore, the runtime vulnerability analysis capabilities offered by this feature cannot be applied.

I recommend you to be able to generate [Product ideas - Dynatrace Community](https://community.dynatrace.com/category/DynatraceProductIdeas)&nbsp; so that it can be evaluated 😄

Hope it’s helpful 💪

---

<div class="post-metadata">

**Author:** ![g\_kat](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/g_kat/32/34573_2.png) [@g\_kat](https://community.dynatrace.com/u/g_kat)\
**Post date:** [May 16, 2025, 3:03pm UTC](https://community.dynatrace.com/t/runtime-vulnerability-analytics-on-mobile-applications/51672/4 "2025-05-16T15:03:36Z")

</div>

Thanks [@PierreGutierrez](https://community.dynatrace.com/user/45543)&nbsp; and&nbsp;[@Thomas\_Wirth1](https://community.dynatrace.com/user/35396), you confirmed my thoughts.

Indeed, with the current Mobile SDK philosophy it doesn’t make much sense getting RVA there, but I will post an idea just to test the waters, since security in mobile applications is a very “hot” area so to speak.

Thanks,

George

---

<div class="post-metadata">

**Author:** ![PierreGutierrez](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/pierregutierrez/32/5934_2.png) [@PierreGutierrez](https://community.dynatrace.com/u/PierreGutierrez)\
**Post date:** [May 16, 2025, 3:19pm UTC](https://community.dynatrace.com/t/runtime-vulnerability-analytics-on-mobile-applications/51672/5 "2025-05-16T15:19:00Z")

</div>

Yes, it’s a very interesting topic, and I think it’s highly valuable from a security perspective.

Currently, there’s Dynatrace Live Debugger, which focuses on the backend and its real-time code review.

I think that if they’ve already implemented this functionality, they could have something similar in the future for front-end application code, perhaps reaching the point of RVA.
