Mobisec DSA don’t just look at the mobile app and the API invoked, but also the API Gateway.