When building apps with strict security requirements, developers often default to fully native or brownfield approaches, assuming that JavaScript-based solutions fall short. However, times have changed—many of the security blockers that once limited React Native have been overcome, allowing greenfield apps to achieve the same level of security as their native counterparts.

But security isn’t automatic. Developers must still take deliberate steps to safeguard their apps. By leveraging Expo modules, we can implement critical security features such as secure storage, encrypted networking with TLS pinning, and host whitelisting. Additionally, advanced protections like device assurance, runtime security, and threat monitoring play a crucial role in keeping our apps safe against modern threats—yet many React Native developers remain unfamiliar with them.

In this talk, we’ll explore the essential security technologies available to React Native engineers, demystify key security concepts, and showcase how you can build truly secure mobile applications—without sacrificing the benefits of React Native.

From the sinister injection flaws reminiscent of "Alien" to the terrifying specter of broken authentication akin to what "The Invisible Man" is capable of, we'll explore the most common security vulnerabilities in web development. But don't worry—we'll also shed light on solutions. If you dare, join us and learn how to conquer the darkness invited by your web applications.