Guardsquare has published its analysis of new independent research conducted by TrendCandy, highlighting a growing “client-side trust gap” that is increasing organizations’ exposure to mobile app security breaches, customer attrition, and backend API exploitation.
The global survey of 1,360 mobile app developers and security leaders found that 72% of organizations experienced at least one mobile app security incident in the past year, and 65% reported customer churn or app uninstalls as a direct result of security issues. Despite these impacts, many organizations continue to rely on outdated, OS-level security assumptions that fail to protect mobile apps operating “in the wild.”
“Mobile apps operate outside traditional trust boundaries, but many organizations still rely on OS-level security assumptions that attackers routinely bypass,” said Erica Sheehan, Chief Marketing Officer of Guardsquare. “This research shows the trust gap is already translating into real business impact, from customer churn to increased backend risk.”
Speed pressure and AI are compounding risk
The analysis highlights how development velocity and AI adoption are accelerating mobile app risk:
- 79% of respondents cite time-to-market pressure as the top barrier to stronger mobile app protection, reinforcing persistent misconceptions that security slows development.
- 96% of developers report using AI-assisted tools to build mobile apps and SDKs.
- 81% say AI-generated code has introduced new vulnerabilities.
- More than half of developers report uncertainty around how to properly secure AI-written mobile applications.
The research points to a clear shift in how organizations are approaching mobile security:
- 91% of respondents prefer security that spans the entire software development lifecycle (SDLC).
- 96% of organizations using multi-layered protection report fewer mobile app security incidents.
Guardsquare’s analysis concludes that closing the client-side trust gap requires integrated mobile app security that combines automated testing, multi-layered code protection, runtime defenses, mobile API security, and continuous threat monitoring, all without compromising development speed or app performance.
To learn more about strengthening your mobile app security strategy, download Guardsquare’s ebook, Gaining Ground on Mobile DevSecOps, available now here.
About the research
The research, The Rise of Client-Side Risk and the Trust Gap, was conducted by the independent firm TrendCandy and commissioned by Guardsquare. It surveyed 1,360 mobile app developers and security leaders globally, with a margin of error of ±2% at the 95% confidence level.