WASViking Mobile Security Assessment
WASViking Mobile Security Assessment analyzes uploaded Android and iOS application packages against the OWASP Mobile Application Security Verification Standa…
What WASViking Mobile Security Assessment is
WASViking Mobile Security Assessment analyzes uploaded Android and iOS application packages against the OWASP Mobile Application Security Verification Standard (MASVS). It accepts Android APK and AAB files and iOS IPA files, then performs more than 200 checks across areas such as configuration, transport, cryptography, storage, platform exposure, binary hardening, components, and embedded secrets. It creates a CycloneDX software bill of materials and checks components against published advisories and the CISA KEV catalog. Findings include attack paths, prerequisites, and inputs behind risk scores. Release comparisons show findings that were fixed, introduced, or carried forward, as well as dependency changes. Results enter the same workflow as web and API findings, with an owner, severity, SLA, audit trail, and export. Findings map to OWASP MASVS, MASTG, CWE, and the OWASP Mobile Top 10. The assessment is an optional add-on quoted by scope; pricing depends on targets, modules, and deployment. Evaluation begins with a guided demo, followed by a sales-assisted evaluation against authorized targets.
Good
- Accepts Android APK, AAB, and iOS IPA files
- Performs more than 200 checks
- Creates a CycloneDX software bill of materials
- Tracks findings across releases
Watch out
- Paid add-on is quoted by scope
- Evaluation is sales-assisted
Who it suits
This assessment suits teams that need security checks for Android or iOS app packages and want findings tracked alongside web and API results. It may also suit organizations mapping findings to named security standards or compliance controls.
Verdict
WASViking Mobile Security Assessment provides package analysis, component checks, and release-level finding tracking. Its add-on pricing is scoped rather than listed, so teams need an evaluation to establish fit and cost.
Plans and prices
From WASViking Mobile Security Assessment's own pricing page, checked 8 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Business | Priced on request | Custom plan · Mobile Security Assessment is an add-on quoted by scope |
| Enterprise | Priced on request | Custom plan · Mobile Security Assessment is an add-on quoted by scope |
| Pro | Priced on request | Mobile Security Assessment is an add-on quoted by scope |
| Starter | Priced on request | Up to 5 targets · Mobile Security Assessment is an add-on quoted by scope |
The facts
Each one read from WASViking Mobile Security Assessment's own pages, with the date it was checked.
What it does
- Binary storage security
- WASViking says uploaded mobile application binaries are stored with server-side AES-256 encryption.checked 8 Oct 2026
- Compliance evidence
- The page describes mobile assessment evidence mapped to PCI DSS v4.0, ISO 27001:2022, NIST CSF 2.0, GDPR, and LGPD controls.checked 8 Oct 2026
- Coverage
- The engine performs more than 200 checks across every MASVS group, including configuration, transport, cryptography, storage, platform exposure, binary hardening, components, and embedded secrets.checked 8 Oct 2026
- Evaluation
- WASViking says an engagement starts with a guided demo, followed by a sales-assisted evaluation using scans against targets the customer authorizes.checked 8 Oct 2026
- Finding context
- Findings include an attack path, prerequisites, and the inputs used to produce the risk score.checked 8 Oct 2026
- Package formats
- The assessment accepts Android APK and AAB files and iOS IPA files.checked 8 Oct 2026
- Pricing
- Mobile Security Assessment is listed as an optional add-on, quoted based on scope and enabled for the organization by WASViking; the site says pricing depends on targets, modules, and deployment.checked 8 Oct 2026
- Purpose
- Mobile Security Assessment analyzes uploaded Android or iOS packages against the OWASP Mobile Application Security Verification Standard (MASVS).checked 8 Oct 2026
- Release comparison
- The service compares releases by finding identity and reports what was fixed, introduced, or carried forward, including dependency changes.checked 8 Oct 2026
- SBOM
- It creates a CycloneDX software bill of materials from the shipped application and matches components against published advisories and the CISA KEV catalog.checked 8 Oct 2026
- Support
- The demo and quote page says the team will respond within one business day.checked 8 Oct 2026
- Workflow
- Mobile findings enter the same workflow as web and API results, with an owner, severity, SLA, audit trail, and export.checked 8 Oct 2026
The company
- Company security status
- WASViking states that its product supports compliance work for GDPR, LGPD, PCI DSS v4.0, ISO 27001, and BACEN, while the company is working toward SOC 2 Type I and ISO 27001 certification.checked 8 Oct 2026
- Headquarters
- Orlando, Florida, USAchecked 28 Sep 2026
Where it runs
- Standards mapping
- Findings map to OWASP MASVS, MASTG, CWE, and the OWASP Mobile Top 10; legacy MASVS requirement identifiers are also supported.checked 8 Oct 2026
Alternatives to WASViking Mobile Security Assessment
- 1

AppSweep
Free planAndroidiOSWebAPI7.8Free plan - 2

Ostorlab
Free planAndroidiOSWebAPI7.3From $299 a month - 3

Oversecured
AndroidiOSWebAPI6.8$1,000 usage-based - 4
Quixxi Scan
AndroidiOSWeb6.8From $299 a year - 5
6.6From $599 a year - 6
Silker AI Mobile Security
AndroidiOSWeb6.6From $19.50 a month
