Ostorlab provides agentic penetration testing for mobile apps, web apps, APIs, and connected source code.
Alternatives to AppSweep
AppSweep focuses on finding security issues in mobile app code and dependencies, pairing static analysis with interactive runtime testing. Its findings are prioritized by OWASP MASVS categories, and its free plan includes unlimited Android and iOS scans, unlimited team members, a CI CLI, and a downloadable PDF report. Enterprise adds an extended CLI, automated retention policies, larger app uploads, and filtering for issues in dead code. Its cloud-based SaaS model and…
Oversecured is a mobile app security platform combining static, dynamic, and interactive testing with AI-assisted triage.
- 4

Indusface WAS
Indusface WAS is a cloud-based web application security scanner using dynamic application security testing to identify vulnerabilities.
Web6.6From $599 a year - 5
Silker AI Mobile Security
Silker AI Mobile Security protects the APIs used by iOS and Android apps and runs automated security assessments of the apps themselves.
AndroidiOSWeb6.6From $19.50 a month - 6

Zimperium zScan
Zimperium zScan is a cloud service that scans mobile applications for security, privacy, protection, and compliance gaps.
AndroidiOSWebAPI6.5 - 7

Data Theorem Mobile Secure
Data Theorem Mobile Secure is a cloud application security platform for iOS and Android apps.
AndroidiOSWebAPI6.4 - 8
Reversense Security
Reversense Security analyzes mobile and embedded application binaries without requiring source code or manual reverse engineering.
Free planAndroidiOSAPI6.4Free plan - 9
Cacomi
Cacomi is a macOS static analysis tool for developers reviewing source code and app builds.
macOS6.3From $9.99 a year - 10

Quokka
AndroidiOSWebAPI6.3 - 11

Appknox
Appknox is a mobile application security platform for assessing Android and iOS apps.
AndroidiOSWebAPI6.2 - 12
SEBASTiAn
SEBASTiAn is a free, open-source tool for static security assessment of mobile applications.
Free planLinuxmacOSWindows6.2Free plan - 13

Mobexa
Mobexa is a mobile application security platform that tests Android and iOS apps through static, dynamic and runtime analysis.
WebAPISelf-hosted6.1From €2,346 a year - 14
WASViking Mobile Security Assessment
WASViking Mobile Security Assessment analyzes uploaded Android and iOS application packages against the OWASP Mobile Application Security Verification Standard (MASVS).
AndroidiOSWeb6.1 - 15

NowSecure Platform
NowSecure Platform gives organizations visibility into security, privacy, AI, compliance, and software supply-chain risks in mobile apps they build, use, or manage.
AndroidiOSWebAPI6.0 - 16
Q-mast
Q-mast is an automated security testing tool for iOS and Android apps, designed to analyze compiled binaries without source code.
AndroidiOSAPI5.8 - 17
Tungstenic
Tungstenic is a web platform for analyzing Android and iOS application binaries, including APK and IPA files.
Web5.8 - 18
QARK
LinuxmacOSWindows4.8 - 194.6
- 204.3

