# InsecureShop

InsecureShop is a Cyber Range Training product. It runs on-premises. Pricing is free.

InsecureShop is an intentionally vulnerable Android application built in Kotlin for educating developers and security professionals about mobile app vulnerabilities and penetration testing techniques.

Checked October 2026.

## What is InsecureShop?

InsecureShop is an intentionally vulnerable Android application developed in Kotlin that serves as an educational platform for developers and security professionals.

The application incorporates real-world vulnerabilities commonly found during mobile penetration tests, providing a controlled environment for learning and testing.

Key features include:
- Focus on Android Deeplinks and Webviews vulnerabilities
- Real-world vulnerability scenarios based on actual mobile pentest findings
- Educational platform for understanding modern Android app security issues
- Testing environment for Android penetration testing skills development

The tool is designed specifically for security education and training purposes, allowing users to practice identifying and exploiting Android application vulnerabilities in a safe, controlled environment.

Tags: Education, Android Security, Vulnerable Applications

## Where it fits in your security program (NIST CSF 2.0)

- [Protect](https://cybersectools.com/guides/building-protect-program-small-team): helps you prevent attacks and keep data safe.

## Quick facts

- Category: [Human Risk](https://cybersectools.com/categories/human-risk) · [Cyber Range Training](https://cybersectools.com/categories/cyber-range)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 253
- Website: github.com

## InsecureShop FAQ

### What is InsecureShop?

InsecureShop is a product in the Cyber Range Training category. It covers Education, Android Security and Vulnerable Applications.

### What is the pricing for InsecureShop?

InsecureShop is free. Download and setup instructions are at https://github.com/optiv/insecureshop/.

### What are alternatives to InsecureShop?

Alternatives to InsecureShop listed on CybersecTools:

1. [Payatu BugBazaar](https://cybersectools.com/tools/payatu-bugbazaar) - Intentionally vulnerable mobile app for practicing Android and iOS penetration testing (Free)
2. [OffSec Proving Grounds](https://cybersectools.com/tools/offsec-proving-grounds) - Online lab platform offering hands-on penetration testing practice machines for OSCP prep (Commercial)
3. [IronCircle Cybersecurity Training Platform](https://cybersectools.com/tools/ironcircle-cybersecurity-training-platform) - AI-powered browser-based cybersecurity training platform with labs and certs (Commercial)
4. [TryHackMe Cyber Security Training](https://cybersectools.com/tools/tryhackme-cyber-security-training) - Hands-on cybersecurity training platform with gamified labs and challenges (Commercial)
5. [Cybexer Cyber Ranges for Finance and Banking](https://cybersectools.com/tools/cybexer-cyber-ranges-for-finance-and-banking) - Cyber range platform for finance & banking sector security training (Commercial)

Compare all InsecureShop alternatives at [https://cybersectools.com/alternatives/insecureshop](https://cybersectools.com/alternatives/insecureshop)

### What deployment and organization size does InsecureShop fit?

InsecureShop is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare InsecureShop with similar solutions

- [InsecureShop vs Payatu BugBazaar](https://cybersectools.com/compare/insecureshop-vs-payatu-bugbazaar)
- [InsecureShop vs OffSec Proving Grounds](https://cybersectools.com/compare/insecureshop-vs-offsec-proving-grounds)
- [InsecureShop vs IronCircle Cybersecurity Training Platform](https://cybersectools.com/compare/insecureshop-vs-ironcircle-cybersecurity-training-platform)

All alternatives to InsecureShop: [/alternatives/insecureshop](https://cybersectools.com/alternatives/insecureshop)

---

Source: https://cybersectools.com/tools/insecureshop

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on InsecureShop: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md