Promon is a runtime application security company. It protects mobile, desktop, SDK and web applications from tampering, repackaging, hooking and fraud once they are running on devices and in browsers their owners do not control. Protection is embedded into the compiled app, so development teams do not change their source code.
It is built for organisations whose apps handle money, personal data or valuable content, such as banks, payment providers, game studios, streaming services, retailers and healthcare providers.
At A Glance
| Vendor | Promon |
|---|---|
| Category | Runtime application self protection and app shielding |
| Deployment | Post compile shielding; telemetry and analytics on premises, SaaS or hybrid |
| Agentic AI | Promon MCP for Insight (early access) |
| Customers | Raiffeisenbank, MONETA Money Bank |
| Founded | Origins in 2005, Oslo, Norway |
| Market classification | DevSecOps |
What Promon Does
Once an app leaves the store it runs on devices its owner does not control, where attackers root devices, attach debuggers, hook functions or repackage the app with malware. Promon’s answer is a continuous loop of protect, collect, analyse and adapt: the app defends itself from the inside, reports what it sees while it runs, and its defences can be changed as the threat picture changes, without a new release or another trip through the app stores. Security and fraud teams draw on the same loop for per-device risk signals.
Products
Promon Shield
Shield is runtime application self protection, anti-tamper, anti-repackaging and code obfuscation for mobile apps, desktop apps and SDKs. It detects jailbroken and rooted devices, debuggers, hooking and repackaging, and protects against screenshots, overlays and keyloggers. Mobile coverage spans Android, Chrome OS, iOS, macOS for mobile apps on desktop, HarmonyOS and Amazon Fire OS, and desktop coverage spans Windows and macOS. It also helps organisations meet GDPR, PSD2, DORA and CCPA obligations.
Promon Shield For Web
Shield for Web, the former Codesealer product, brings the same idea to browsers. It validates that the client is genuine and untampered and creates a Trusted Runtime Environment in the browser, so only real clients reach critical backend services. API endpoints are concealed without code changes, which cuts off probing, reconnaissance and bots.
Promon Insight
Insight is for teams that need to see what is happening to their apps in the field.
| Insight for App Visibility | Confirms that runtime protection is active and that devices are healthy. |
|---|---|
| Insight for App Security | Evidence based analytics that show attack patterns and help prioritise risks. |
| Insight for App Risk | Per-device and per-event risk signals such as remote access trojans, emulator activity, VPN use, active calls and motion anomalies, sent to a SIEM, fraud platform or dashboard. |
Extensions
Code Protect protects intellectual property in app code. Data Protect stores secrets securely even on compromised devices. Verify runs real-time app integrity checks so backend APIs only serve genuine app instances.
Promon Control And Shield Studio
Promon Control lets teams change protection responses while apps are live. Shield Studio is the control plane where protection policies and app configuration are managed and pushed out without a rebuild or redeployment.
How It Works
| Component | What it does |
|---|---|
| Shielding | Shield is integrated post-compile in seconds and embedded in the finished binary, with no source code changes and no SDK. |
| Promon Integrator | Integrator slots into the CI/CD pipeline, embeds Shield into each build and connects telemetry and control to existing tooling. |
| Telemetry and decisioning | The Insight layer can run on premises, as SaaS or in a hybrid setup, so sensitive data stays where the organisation needs it. Shield for Mobile can also be deployed on premises for strict regulatory environments. |
| Response | Behavioural AI models and threat graphs score risk in real time, and automated response can block, adapt or escalate with or without a person in the loop. |
| Web deployment | Shield for Web is deployed through a reverse proxy in front of the web application. |
Agentic AI Capabilities
Promon MCP
Promon MCP gives AI agents a standard interface to Insight data. Analysts can “query attack types, device health, trends and volumes from Claude, ChatGPT, Gemini or any agent that supports MCP”. Access is read only, limited to the customer’s own data and uses the same sign-in as Insight.
Promon MCP is in early access for selected Insight customers and requires Promon Shield for Mobile. It lets security and fraud analysts investigate threats to their apps from the AI assistant they already use.
Company Background
| Founded | Origins in 2005, when founder Tom Lysemose identified a key gap in mobile security. |
|---|---|
| Headquarters | Oslo, Norway, with offices in more than 15 countries. |
| Leadership | Daniel Kollberg (Chief Executive Officer), Tom Lysemose (Founder) and Shaun Cooney (Chief Product and Technology Officer). |
| Funding | Strategic investment from GRO Capital, Kirk Kapital and Trifork in 2022. |
| Acquisitions | Codesealer, completed in August 2026, extending protection to web applications and the APIs behind them. |
| Scale | A reported 2bn+ apps protected, 13bn+ transactions protected each month and 500+ enterprise customers. |
| Recognition | Application Shielding is included in the 2026 Gartner Hype Cycle for Secure Software Engineering. |
Note: This overview is compiled from Promon’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.