title: How to protect app IPA from hacks if reverse engineering is possible
body: <p>Recently we developed and published a mobile banking app on the app store, for a big banking organization. The bank hired a security firm to perform ethical hacking over the app to see if it, in anyways compromises confidential data.</p>
  
  <p>We recently received the hacking report from the firm, which in-spite of saying that no serious security issues are present, contains a list of all the class files, method names and the assembly code of the project.</p>
  
  <p>Now the client insists that we fix these security loop holes and republish the app. However we don't have any idea how did they manage to get all these details from the application's IPA. I searched this over SO and found a particular post mentioning <a href="http://dvlabs.tippingpoint.com/blog/2009/03/06/reverse-engineering-iphone-appstore-binaries" rel="noreferrer">this</a> link, which states that you can't save your app from being hacked.</p>
  
  <p>Please help me how to fix these security vulnerabilities , or if not possible, how to convince the client.</p>
  
  <p>Edit:
  Recently came across <a href="http://www.arxan.com/software-protection-products/EnsureIT-for-Apple-iOS/index.php" rel="noreferrer">this</a> page. Seems like EnsureIT from Arxan can prevent app IPAs from reverse engineering. Anyone experienced with this?</p>