EVERYTHING XIAOMI
Get listed

WASViking Mobile Security Assessment

WASViking Mobile Security Assessment analyzes uploaded Android and iOS application packages against the OWASP Mobile Application Security Verification Standa…

WASViking Mobile Security Assessment's website

What WASViking Mobile Security Assessment is

WASViking Mobile Security Assessment analyzes uploaded Android and iOS application packages against the OWASP Mobile Application Security Verification Standard (MASVS). It accepts Android APK and AAB files and iOS IPA files, then performs more than 200 checks across areas such as configuration, transport, cryptography, storage, platform exposure, binary hardening, components, and embedded secrets. It creates a CycloneDX software bill of materials and checks components against published advisories and the CISA KEV catalog. Findings include attack paths, prerequisites, and inputs behind risk scores. Release comparisons show findings that were fixed, introduced, or carried forward, as well as dependency changes. Results enter the same workflow as web and API findings, with an owner, severity, SLA, audit trail, and export. Findings map to OWASP MASVS, MASTG, CWE, and the OWASP Mobile Top 10. The assessment is an optional add-on quoted by scope; pricing depends on targets, modules, and deployment. Evaluation begins with a guided demo, followed by a sales-assisted evaluation against authorized targets.

Good

  • Accepts Android APK, AAB, and iOS IPA files
  • Performs more than 200 checks
  • Creates a CycloneDX software bill of materials
  • Tracks findings across releases

Watch out

  • Paid add-on is quoted by scope
  • Evaluation is sales-assisted

Who it suits

This assessment suits teams that need security checks for Android or iOS app packages and want findings tracked alongside web and API results. It may also suit organizations mapping findings to named security standards or compliance controls.

Verdict

WASViking Mobile Security Assessment provides package analysis, component checks, and release-level finding tracking. Its add-on pricing is scoped rather than listed, so teams need an evaluation to establish fit and cost.

Plans and prices

From WASViking Mobile Security Assessment's own pricing page, checked 8 Oct 2026.

All about pricing
PlanPriceWhat it gives you
BusinessPriced on requestCustom plan · Mobile Security Assessment is an add-on quoted by scope
EnterprisePriced on requestCustom plan · Mobile Security Assessment is an add-on quoted by scope
ProPriced on requestMobile Security Assessment is an add-on quoted by scope
StarterPriced on requestUp to 5 targets · Mobile Security Assessment is an add-on quoted by scope

The facts

Each one read from WASViking Mobile Security Assessment's own pages, with the date it was checked.

What it does

Binary storage security
WASViking says uploaded mobile application binaries are stored with server-side AES-256 encryption.checked 8 Oct 2026
Compliance evidence
The page describes mobile assessment evidence mapped to PCI DSS v4.0, ISO 27001:2022, NIST CSF 2.0, GDPR, and LGPD controls.checked 8 Oct 2026
Coverage
The engine performs more than 200 checks across every MASVS group, including configuration, transport, cryptography, storage, platform exposure, binary hardening, components, and embedded secrets.checked 8 Oct 2026
Evaluation
WASViking says an engagement starts with a guided demo, followed by a sales-assisted evaluation using scans against targets the customer authorizes.checked 8 Oct 2026
Finding context
Findings include an attack path, prerequisites, and the inputs used to produce the risk score.checked 8 Oct 2026
Package formats
The assessment accepts Android APK and AAB files and iOS IPA files.checked 8 Oct 2026
Pricing
Mobile Security Assessment is listed as an optional add-on, quoted based on scope and enabled for the organization by WASViking; the site says pricing depends on targets, modules, and deployment.checked 8 Oct 2026
Purpose
Mobile Security Assessment analyzes uploaded Android or iOS packages against the OWASP Mobile Application Security Verification Standard (MASVS).checked 8 Oct 2026
Release comparison
The service compares releases by finding identity and reports what was fixed, introduced, or carried forward, including dependency changes.checked 8 Oct 2026
SBOM
It creates a CycloneDX software bill of materials from the shipped application and matches components against published advisories and the CISA KEV catalog.checked 8 Oct 2026
Support
The demo and quote page says the team will respond within one business day.checked 8 Oct 2026
Workflow
Mobile findings enter the same workflow as web and API results, with an owner, severity, SLA, audit trail, and export.checked 8 Oct 2026

The company

Company security status
WASViking states that its product supports compliance work for GDPR, LGPD, PCI DSS v4.0, ISO 27001, and BACEN, while the company is working toward SOC 2 Type I and ISO 27001 certification.checked 8 Oct 2026
Headquarters
Orlando, Florida, USAchecked 28 Sep 2026

Where it runs

Standards mapping
Findings map to OWASP MASVS, MASTG, CWE, and the OWASP Mobile Top 10; legacy MASVS requirement identifiers are also supported.checked 8 Oct 2026

Alternatives to WASViking Mobile Security Assessment

All alternatives
  1. 1AppSweep logo

    AppSweep

    Free planAndroidiOSWebAPI
    7.8Free plan
  2. 2Ostorlab logo

    Ostorlab

    Free planAndroidiOSWebAPI
    7.3From $299 a month
  3. 3Oversecured logo

    Oversecured

    AndroidiOSWebAPI
    6.8$1,000 usage-based
  4. 4

    Quixxi Scan

    AndroidiOSWeb
    6.8From $299 a year
  5. 5Indusface WAS logo
    6.6From $599 a year
  6. 6
    6.6From $19.50 a month