iShredder™ Android Achieves DEKRA MASA L1 Security Certification

In a comprehensive technical assessment, DEKRA—authorized by Google as a security lab—confirmed that iShredder™ Android exhibits no common vulnerabilities and successfully implements key OWASP standards. For users, this means that the app not only reliably and irreversibly deletes files but also meets stringent data security and privacy standards itself. 
 

Technical Assessment in Accordance with OWASP Standards 
Under the Mobile Application Security Assessment (MASA) certification for Level 1, DEKRA analyzed essential security controls that every mobile app should have in place to protect against common threats.

Key Security Features at a Glance

• Data Storage and Privacy: 
  iShredder™ Android ensures that no sensitive user data remains on the device unprotected. For example, the app prevents confidential information from being stored unencrypted outside the app environment or written to logs.
• Cryptography & Overwrite Methods: 
  The app exclusively employs proven and secure encryption methods—no outdated algorithms are used. The “hardcoding” mentioned in the test report does not refer to cryptographic keys but rather to overwrite patterns used for secure data deletion. These fixed byte sequences serve only to overwrite files multiple times, making them irrecoverable.
• Network Communication: 
  All data transmissions are thoroughly encrypted (e.g., via HTTPS/TLS). This prevents information from being intercepted or manipulated on its way between the app and the server.
• Minimal Permission Scope: 
  According to the DEKRA report, iShredder™ Android requests only those permissions that are strictly necessary for the desired deletion function (e.g., access to SMS or call logs only if the user explicitly chooses to shred those data). This effectively implements the principle of least privilege.
• Code Quality and App Integrity: 
  iShredder™ Android shows no known vulnerabilities and uses Android’s security features in compliance with relevant guidelines. External libraries and frameworks were also vetted by DEKRA, revealing no critical issues that could compromise data security. The report confirms that debugging interfaces are disabled in the release version.
• No Storage of Sensitive Data in Logs: 
  DEKRA confirms that iShredder™ does not log sensitive information (such as passwords or license keys) in plaintext.
• Third-Party Libraries Verified: 
  The third-party libraries used by iShredder™ underwent static analyses for known vulnerabilities and have been deemed securely integrated.

“We are proud of this certification, which confirms our consistent focus o 
n maximum security,” emphasizes Chris Bohn, CEO of Protectstar. “The DEKRA MASA L1 award shows our users and enterprise customers that they can trust iShredder™ Android—not just when it comes to permanently deleting sensitive data, but also regarding the overall security of the app. We will build on this success and are already preparing for the more demanding MASA L2 certification to further raise our security level.”

Availability and Further Information 
iShredder™ Android is available in a free version, as well as in enhanced editions for professional users. The app can be obtained from the Google Play Store or directly from the Protectstar website (www.protectstar.com/en/products/ishredder). Further information on iShredder™ Android and DEKRA MASA L1 certification can also be found on Protectstar’s official website.