https://cybertoolchain.io/tools/mastg New releases and features in mastg, tracked by The Cyber Toolchain. en Wed, 24 Jun 2026 08:58:15 GMT https://github.com/OWASP/mastg/releases/tag/v1.9.0 https://github.com/OWASP/mastg/releases/tag/v1.9.0 Wed, 24 Jun 2026 08:58:15 GMT MASTG v1.9.0 adds MAS-P Privacy profile, completes CWE mapping across all MASVS categories, and introduces new v2 tests for Android/iOS security. • Adds `MAS-P Privacy` profile covering all MASVS-PRIVACY test cases • Adds complete CWE mapping across all MASVS categories (AUTH, CRYPTO, NETWORK, PLATFORM, STORAGE, CODE, RESILIENCE) • Adds new v2 tests MASTG-TEST-0262 and MASTG-TEST-0263 for Android backup testing • Adds new v2 tests MASTG-TEST-0264 and MASTG-TEST-0265 for StrictMode detection • Adds new v2 tests MASTG-TEST-0278, MASTG-TEST-0279, and MASTG-TEST-0280 for iOS UIPasteboard Breaking changes: • The legacy PDF format is deprecated and removed from the primary reference structure. • MASTG-TEST-0031 (Testing JavaScript Execution in WebViews) is deprecated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mastg https://github.com/OWASP/mastg/releases/tag/v1.8.0 https://github.com/OWASP/mastg/releases/tag/v1.8.0 Wed, 24 Jun 2026 08:34:28 GMT MASTG v1.8.0 introduces new MASWE, MASTG Demos, and Best Practices component types plus MASVS-PRIVACY controls. • `MASWE` (Mobile App Security Weakness Enumeration) component type links MASVS controls to testable weaknesses, with entries like `MASWE-0001`, `MASWE-0027`, and `MASWE-0108` added. • `MASTG Demos` component type provides concrete, reproducible test demonstrations with real app binaries, including an Android demo APK build pipeline via GitHub Actions. • `MASTG Best Practices` component type provides actionable remediation guidance, initially launched with the framework in PR #3081. • `MASVS-PRIVACY` category added to `MASVS v2.1.0`, introducing four new privacy controls (`MASVS-PRIVACY-1` through `-4`) and the `MAS-P` profile. • New `MASTG Test Apps` (Android and iOS) skeleton apps embed code samples directly to make every demo reproducible on a real device. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mastg https://github.com/OWASP/mastg/releases/tag/v1.6.0 https://github.com/OWASP/mastg/releases/tag/v1.6.0 Mon, 08 May 2023 10:20:33 GMT OWASP MASTG v1.6.0 introduces MASVS color-coding, updated checklists for MASVS v2.0.0, and dynamic page support for the website. • Introduces official color-coding to MASVS v2.0.0 controls to help users quickly identify different control groups across the MASTG website. • Updates the MAS Checklist pages and the checklist itself with new colors and tables listing MASVS v2.0.0 controls alongside corresponding MASTG tests for Android and iOS platforms. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mastg https://github.com/OWASP/mastg/releases/tag/v1.4.0 https://github.com/OWASP/mastg/releases/tag/v1.4.0 Fri, 21 Jan 2022 13:10:24 GMT OWASP Mobile App Security Checklists are now fully automated and available in 13 languages. • MASVS Checklists are now completely automated and generated from scratch using `openpyxl`. • Checklists are now available in all 13 MASVS languages. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mastg https://github.com/OWASP/mastg/releases/tag/v1.3.0 https://github.com/OWASP/mastg/releases/tag/v1.3.0 Thu, 23 Dec 2021 11:03:42 GMT MSTG v1.3.0 adds checks for APK Signature Scheme (v4), iOS debugging symbols inspection, and Loaded Native Libraries • Adds APK Signature Scheme (v4) check under `0x05a` • Adds `iOS Debugging Symbols Inspection` check under `MSTG-CODE-3` • Adds `Loaded Native Libraries` section under `0x06c` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mastg