iOS distribution questions, answered.

DistKit is a web SaaS for developers and QA teams that analyzes already-signed IPA packages, keeps App and Release history, and creates controlled tester links. It does not sign apps or bypass Apple distribution rules.

DistKit reads IPA packages that contain Info.plist and, when present, embedded.mobileprovision. Development, Ad Hoc, and authorized Enterprise packages may pass package-level checks; an App Store distribution profile cannot produce a direct web OTA path.

No. DistKit parses package metadata and provisioning information; it does not perform a complete cryptographic signature-verification service and never re-signs the IPA. You remain responsible for certificates, provisioning profiles, entitlements, and export settings.

DistKit can keep the Release and show the package-level reason, such as an expired profile, Bundle ID mismatch, missing profile, or App Store distribution type. A blocked Release does not receive a usable OTA installation path until you upload a corrected IPA.

No. DistKit reports package-level conditions, but it cannot confirm that a particular device is included in the provisioning profile or that iOS completed installation. Development and Ad Hoc builds require the tester UDID to be included in the profile.

The tester follows the DistKit device flow and explicitly installs a temporary configuration profile so the browser can return the device UDID. The Release owner then registers that UDID in Apple Developer, regenerates the provisioning profile, signs a new build, and uploads the replacement IPA.

No. The configuration profile is used only to return device details to the browser; it does not enroll the device in mobile-device management. DistKit device-profile sessions expire after about 15 minutes.

No. A tester can open an enabled Release or share-link page without a DistKit account. The publisher can still require a link password or set an expiry and request limit.

A request counts when DistKit authorizes and serves an iOS installation manifest. It is an install attempt signal, not proof that iOS downloaded the IPA, completed installation, or launched the app.

Production IPA objects are stored privately in Cloudflare R2. A Worker checks the signed-in account or public share-link policy before it serves a manifest or IPA object.

Free, Pro, and Business are the current plan tiers. The pricing page shows their current USD price, App, Release, monthly manifest-request, and storage limits. Paid checkout availability is confirmed in Billing before purchase.

Use TestFlight when you need Apple-managed tester groups, feedback, and App Store Connect beta distribution for up to 10,000 external testers. DistKit is designed for controlled distribution of packages you already signed, including recurring QA, client review, and authorized internal workflows.