Approov is a mobile security platform that ensures only authorized mobile apps, running on unaltered devices, can access APIs and their cloud-based backend services. It uses runtime application self-protection (RASP) and a challenge-response mechanism to authenticate app integrity, without relying on embedded secrets in the app. This approach aims to protect against a variety of threats, including botnets, fraudulent transactions, and malicious scripts, by differentiating legitimate app traffic from unauthorized sources​​​​​​.