# OWASP MASVS v2 Quick Reference
| Category | Key Checks |
|----------|-----------|
| MASVS-STORAGE | No sensitive data in logs, backups, or clipboard |
| MASVS-CRYPTO | No hardcoded keys, proper key management |
| MASVS-AUTH | Biometric + server-side auth, session management |
| MASVS-NETWORK | Certificate pinning, no cleartext traffic |
| MASVS-PLATFORM | No exported components, intent filter validation |
| MASVS-CODE | No debugging, obfuscation, integrity checks |
| MASVS-RESILIENCE | Anti-tampering, root/jailbreak detection |
