'%3e%3cpath%20d='M138%2095.6436V147H0V0H138V51.3564H59.3526V95.6436H138Z'%20fill='white'/%3e%3cpath%20d='M208%200V147H150V0H208Z'%20fill='white'/%3e%3cpath%20d='M361%200V51.4292H321.377V147H261.731V51.4292H220V0H361Z'%20fill='white'/%3e%3cpath%20d='M512%200V51.4292H472.939V147H414.139V51.4292H373V0H512Z'%20fill='white'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_1_12'%3e%3crect%20width='512'%20height='147'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Mobile app security analysis. For every team.
AI-powered security and privacy scanning that takes 30 minutes, not 40 hours.
Free
$0
Free forever
Public scorecard for any app.
- Unlimited public app scans
- CITT trust score (0-100)
- Primary concern + severity breakdown
- Plain-language recommendation
- Public app catalog access
Pro
$49/mo
Overage: $10/scan
Full technical reports. API access.
- 3 detailed scans per month
- Deobfuscated code + line numbers
- CVSS scoring + remediation guidance
- Compliance mapping (GDPR/CCPA/COPPA)
- Private scans
- API access + CSV/JSON export
- Direct file upload (APK/IPA)
Most Popular
Team
$199/mo
Overage: $5/scan
CI/CD integration. Priority processing.
- 15 detailed scans per month
- Everything in Pro
- CI/CD integration (GitHub Actions)
- Priority processing queue
- Custom scan profiles
- Up to 5 team members
- Webhook notifications
Scale
Custom
Book a call
White-label. Volume. SLA.
- 50+ scans per month
- Everything in Team
- White-label reports + branding
- Custom subdomain or domain
- SLA-backed turnaround
- Bulk submission (API + CSV)
- Unlimited team members
- Dedicated support
| Feature | Free | Pro | Team | Scale |
|---|---|---|---|---|
| Scanning | ||||
| Public app scans | Unlimited | Unlimited | Unlimited | Unlimited |
| Detailed technical scans | — | 3/month | 15/month | 50+/month |
| Private scans | — | ✓ | ✓ | ✓ |
| Direct file upload (APK/XAPK/IPA) | — | ✓ | ✓ | ✓ |
| Priority processing | — | — | ✓ | SLA-backed |
| Custom scan profiles | — | — | ✓ | ✓ |
| Bulk submission | — | — | — | ✓ |
| Reports | ||||
| Public scorecard | ✓ | ✓ | ✓ | ✓ |
| Detailed technical report | — | ✓ | ✓ | ✓ |
| Deobfuscated code snippets | — | ✓ | ✓ | ✓ |
| CVSS severity scoring | — | ✓ | ✓ | ✓ |
| Remediation guidance | — | ✓ | ✓ | ✓ |
| Compliance mapping | — | ✓ | ✓ | ✓ |
| SDK inventory + behavior | — | ✓ | ✓ | ✓ |
| Custom report prompts | — | — | Up to 5/scan | Unlimited |
| White-label reports | — | — | — | ✓ |
| Integration | ||||
| API access | — | ✓ | ✓ | ✓ |
| CSV/JSON export | — | ✓ | ✓ | ✓ |
| GitHub Actions | — | — | ✓ | ✓ |
| Webhook notifications | — | — | ✓ | ✓ |
| Custom integrations | — | — | — | ✓ |
| Team | ||||
| Team members | 1 | 1 | 5 (+$10/mo each) | Unlimited |
| Scan history + trends | — | — | ✓ | ✓ |
| Dedicated support | — | — | — | ✓ |
| MobSF / QARK | CITT | |
|---|---|---|
| Analysis method | Regex / pattern matching | AI semantic analysis |
| False positive rate | High (no context) | Low (understands usage) |
| Remediation guidance | Generic flag list | Risk-ranked with impact context |
| AI-powered | No | Multi-agent, cross-domain |
| Deobfuscation | Breaks most rules | Reads through it |
| Compliance mapping | No | GDPR / CCPA / COPPA |
1200+apps scanned
7,554issues found
78%of apps have hardcoded API keys