Bandar Baru Uda · Johor Bahru
The week before a release, someone still has to sit with the installed app.
System Fabric Path reviews mobile applications the way a careful colleague would: on devices, through the journeys that matter, with a written memo instead of a dashboard. We work from Jalan Padi Ria with product teams across Johor.
Primary review
Security and threat-surface review
This is the engagement most teams book first. We install the iOS and Android builds you actually intend to ship, use accounts that match real roles, and try the boring, damaging things: leftover sessions, chatty logs, open deep links, backups that include more than they should.
The week ends with a findings memo and a short walkthrough for the people who will fix the items. If you only want a scanner export, we are the wrong room.
Also on the books
Related reviews you can request on their own
- Privacy and personal-data review A reading of what the app collects, why, where it goes, and how that sits with Malaysian PDPA expectations.
- Accessibility and assistive-use review Time with VoiceOver, TalkBack, large type, and keyboard-ish focus to see who can actually finish a task.
- Performance, battery, and network review A practical reading of startup, scroll, radio use, and what happens on a slow Malaysian mobile network.
- Store listing and policy readiness A pass over screenshots, permissions, disclosures, and the behaviours reviewers tend to reject.
- Release-readiness review A combined pass when a date is already on the calendar and you need a single written picture of risk.
Work already written
What a finished engagement looks like from the outside
-
Johor Bahru
Regional logistics tracker
Security and performance pass before a partner go-live. Highest-severity item was a session that survived logout on Android.
-
Iskandar Puteri
Neighbourhood grocery checkout
TalkBack could not leave the payment sheet. Three controls were unlabeled. Retest cleared the journey in one afternoon.
-
Tebrau
Clinic appointment app
Privacy review ahead of a new reminder feature. An analytics SDK was starting before the notice screen.
Names of clients stay off this page. The notes above are the shape of the work, not a claim about volume or rank.
How a week is spent
Scope in writing, devices on the desk, a memo you can hand to engineering.
We agree journeys, roles, and builds before the clock starts. You get a named reviewer, not a rotating inbox. The method page sets out the path from intake to retest.
From the notes
Recent writing from the practice
-
What a mobile security review actually opens
Not a scanner score. A week with the builds you ship, the accounts you use in production-like conditions, and a written trail of what we could do.
-
PDPA and the installed app, not only the notice
Malaysian privacy duties start with purpose and notice. The running software is where those duties succeed or quietly fail.
-
TalkBack on a checkout that looked finished
A grocery app in Iskandar could be completed with eyes and a finger. It could not be completed with TalkBack. The gap was three unlabeled buttons and a focus trap.
Studio
No. 27, Jalan Padi Ria 13
Bandar Baru Uda, Johor Bahru, Johor 81200, Malaysia. Briefings are by appointment. If you already have builds and a date, write first — we will tell you whether the week still fits.
+60 7-2349390
reviews@systemfabricpath.digital
Monday to Friday, 9:00–18:00 MYT
Bring release or release-candidate artefacts, a privacy notice, and the two or three journeys that would hurt if they failed. That is enough to start a briefing.