Best DVHMA Damn Vulnerable Hybrid Mobile App Alternatives & Competitors in 2026

Vuldroid

A deliberately vulnerable Android application containing multiple security flaws designed for educational purposes and security training.

Ostorlab Mobile Security

Mobile security testing platform for Android and iOS apps with SAST and DAST

ImmuniWeb® Neuron Mobile

AI-enhanced mobile app security scanner for Android & iOS with SAST/DAST

DerScanner Mobile Application Security Testing (MAST)

Mobile app security testing platform for Android and iOS apps

Attify Mobile Application Exploitation

Training course for Android and iOS mobile app security testing and exploitation

Codified Security Platform

Mobile app security testing platform for Android and iOS applications

Edgescan Mobile Application Security Testing (MAST)

Mobile app security testing combining vuln assessment, pentesting & forensics

Guardsquare DexGuard

Android app protection tool with obfuscation, encryption, and RASP

Guardsquare App Attestation

Server-side mobile app attestation verifying app integrity and API access

NowSecure Mobile App Risk Intelligence

Risk assessment platform for third-party mobile apps in enterprise networks

NowSecure ADA MASA

Android app security validation service for Google Play MASA certification

NowSecure Platform

Automated mobile app security testing platform for iOS and Android apps

NowSecure Mobile App Security

Mobile app security testing platform for identifying data security risks

Zimperium Mobile Application Protection Suite

Mobile app security platform for DevSecOps teams across app lifecycle

Quixxi Dynamic Application Security Testing (DAST)

DAST solution for mobile and web app security testing and vulnerability scanning

Quixxi Shield

Codeless mobile app protection platform for Android and iOS applications

Quixxi SAST

SAST tool for mobile apps that identifies vulnerabilities in source code

Promon Shield for Mobile™

Runtime app protection for iOS & Android against tampering & malware

PreEmptive DashO

Java, Android, and Kotlin app obfuscation and hardening tool

Kobil mSecure

AI-powered mobile app security platform with device binding and threat detection

APPVISORY

Mobile app risk management platform with static & dynamic analysis.

Protectt.ai

AI-native mobile app security platform with RASP, obfuscation, and fraud prevention.

Corellium Virtual Hardware

ARM-native virtual hardware platform for mobile & IoT security testing.

BeVigil

Security search engine for scanning & risk-scoring mobile apps.

Google Play Crawler JAVA API

A Java-based API tool for programmatically searching and downloading Android applications from Google Play Store with Galaxy S3 device compatibility.

AndroBugs Framework

AndroBugs Framework is an Android vulnerability analysis system that scans mobile applications for security vulnerabilities, missing best practices, and dangerous shell commands.

Hooker

An open-source dynamic analysis framework that intercepts and monitors API calls in Android applications using the Android Substrate framework.

Obfuscapk

A modular Python tool that obfuscates Android applications by manipulating decompiled smali code, resources, and manifest files without requiring source code access.

RiskInDroid

RiskInDroid is a machine learning-based tool that performs quantitative risk analysis of Android applications by reverse engineering bytecode and analyzing permission usage to generate numeric risk scores.

Android Application Analyzer

A comprehensive Android application analysis tool that provides device management, logcat analysis, file examination, and integration with security frameworks like MobSF and JD-GUI.

SUPER Android Analyzer

A command-line Android APK vulnerability analyzer written in Rust that decompresses and scans APK files using rule-based detection to identify security issues.

Enjarify

A tool for translating Dalvik bytecode to equivalent Java bytecode, allowing Java analysis tools to analyze Android applications.

Inspeckage

Inspeckage is a dynamic analysis tool for Android applications that provides runtime behavior monitoring through API hooking and real-time system interaction tracking.

AndroPyTool

A tool for extracting static and dynamic features from Android APKs.

Androguard

A full python tool for analyzing Android files with various functionalities.

diff-gui

A web-based Android application dynamic analysis tool that provides real-time Frida instrumentation capabilities through a Flask interface with modular JavaScript hooking support.

Android App Security Checklist

A security checklist based on OWASP standards that provides comprehensive guidelines for designing, testing, and releasing secure Android applications.

APKX

Python wrapper for Android APK decompilation with various converter and decompiler options.

AppMon

AppMon is a Frida-based automated framework for monitoring and tampering with system API calls across macOS, iOS, and Android applications.

Androguard Docker Image

Docker file for building Androguard dependencies with an optional interactive shell environment.

Appland Downloader

A command-line tool for downloading Android APK files from the Appland platform via npm installation.

gpapi

Node library for calling Google Play APIs with Nexus device behavior.

Google Play Unofficial Python API

An unofficial Python API that enables programmatic searching, browsing, and downloading of Android apps from Google Play Store.

ClassyShark

A standalone binary inspection tool for Android developers with support for various formats and dependencies.

dexmod

A Python tool for patching Dalvik bytecode in DEX files and assisting in Android application analysis

Enjarify by Google

A tool for translating Dalvik bytecode to Java bytecode for analyzing Android applications.

Introspy-Android

Introspy-Android is a dynamic analysis framework that hooks Android APIs at runtime to monitor application behavior and identify security vulnerabilities on rooted devices.

Quick Android Review Kit

QARK is a static analysis tool that scans Android applications for security vulnerabilities and can generate proof-of-concept exploits for discovered issues.