ImmuniWeb MobileSuite is a mobile application penetration testing platform that combines machine learning technology with manual security testing. The platform provides comprehensive security assessment for both mobile applications and their backend infrastructure including APIs and web services. The tool offers multiple testing packages ranging from basic Express Pro to comprehensive Ultimate packages, with varying levels of OWASP MASVS and ASVS compliance testing. It supports testing of iOS and Android applications built with various frameworks including Xamarin and Flutter. Key features include static, dynamic, and interactive security testing with software composition analysis, business logic testing, and authenticated testing capabilities with MFA/SSO support. The platform can bypass resilience mechanisms such as root detection, jailbreak detection, SSL pinning, and code obfuscation. Testing methodology follows industry standards including OWASP Mobile Security Testing Guide, NIST SP 800-115, PCI DSS penetration testing guidance, and MITRE ATT&CK frameworks. The platform provides coverage for OWASP Mobile Top 10, SANS Top 25, and various compliance requirements. Reports include threat-aware risk scoring, MITRE ATT&CK matrix mapping, CVE and CWE mapping, CVSS v4 and EPSS v4 scoring, and detailed remediation guidelines. The platform offers unlimited patch verification, DevSecOps integrations, and 24/7 access to security analysts. The service includes network security assessment for mobile backend infrastructure, privacy and encryption analysis, and can perform testing on physical devices when required. Integration capabilities include popular DevSecOps tools, issue trackers, and WAF solutions for virtual patching.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
SearchCode is an extensive code search engine that indexes 75 billion lines of code from millions of projects to help developers find coding examples and libraries.
A source code search engine for searching alphanumeric snippets, signatures, or keywords in web page HTML, JS, and CSS code.
AndroBugs Framework is an Android vulnerability analysis system that scans mobile applications for security vulnerabilities, missing best practices, and dangerous shell commands.
GuardDog is a CLI tool that identifies malicious PyPI and npm packages using heuristics-based analysis of source code and metadata.
Bearer CLI is a static application security testing tool that scans source code across multiple programming languages to identify and prioritize OWASP Top 10 and CWE Top 25 security vulnerabilities through data flow analysis.
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.
A Nuxt 3 security module that automatically implements OWASP security patterns through HTTP headers, middleware, and various protection mechanisms including CSP, XSS validation, CORS, and CSRF protection.
A technology lookup and lead generation tool that identifies the technology stack of any website and provides features for market research, competitor analysis, and data enrichment.
A comprehensive toolkit for web application security testing, offering a range of products and solutions for identifying vulnerabilities and improving security posture.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.