Freedom251 › Mobile Application Security Testing Software
Mobexa
What Mobexa is
Mobexa is a mobile application security platform that tests Android and iOS apps through static analysis, dynamic testing, and runtime instrumentation. Static analysis examines app packages—including bytecode, native libraries, manifests, resources, and signing information—without source code. Dynamic analysis runs apps on an emulated device and observes network calls, storage, permissions, and communication between apps. Runtime instrumentation hooks live function calls to check controls such as certificate pinning, root detection, and data protection. Mobexa accepts Android APK, AAB, and XAPK files, iOS IPA files, and store URLs. It can produce a software bill of materials and match dependencies against recognized vulnerability sources. Scan evidence can be exported as PDF, structured JSON, SARIF 2.1.0, and SBOM formats. Integrations cover CI/CD, ticketing and issue tracking, SIEM and log pipelines, identity providers, chat notifications, REST APIs, and webhooks. Deployment options are managed SaaS, a private instance, or self-hosting inside the customer’s perimeter. The Starter plan is €2,346 a year, billed €2,346/year, for up to 2 applications and 8 scans/month. A technical trial is available by contacting Mobexa; the team onboards the customer, scans one application, and provides an evidence bundle.
Who it suits
Mobexa suits teams that need to assess Android and iOS app security across static, dynamic, and runtime checks. Its deployment choices and integrations may fit organizations connecting scans to existing development and security workflows.
What it does well
- Analyzes packages without requiring source code
- Tests apps on emulated devices
- Checks runtime controls through instrumentation
- Exports evidence in PDF, JSON, SARIF, and SBOM formats
- Offers managed, private, and self-hosted deployment
What to know first
- Starter is €2,346 a year
- Starter covers up to 2 applications
- Starter allows up to 8 scans/month
- Enterprise pricing is custom and not listed
Limits
The Starter plan costs €2,346/year and includes up to 2 applications and 8 scans per month. Its support is by email with a 1-business-day response target.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Business | €10,455/year · up to 8 applications · up to 32 scans/month · priority support, 4-hour response target | €10,455 a year |
| Starter | €2,346/year · up to 2 applications · up to 8 scans/month · email support, 1-business-day response target | €2,346 a year |
| Enterprise | Custom · unlimited applications, sub-tenants and environments · dedicated single-tenant or on-premise deployment · 24/7 P1 response, 30-minute target | On request |
As mobexa.io lists them, read 1 Oct 2026. The maker's own page has the final word.
Getting started
- Visit https://mobexa.io/.
- Contact Mobexa to arrange a technical trial; the team onboards you and scans one application.
- Provide an Android APK, AAB or XAPK, an iOS IPA, or a store URL for analysis.
- Choose managed SaaS, a private instance or a fully self-hosted deployment.
- Select a plan; Starter is €2,346/year for up to 2 applications and 8 scans per month.
Verdict
Mobexa combines several forms of mobile app analysis with integrations and deployment choices. Compare the Starter limits and annual price with your application and scan needs, or contact the company about a technical trial.
Questions
How much does Mobexa cost?
Starter costs €2,346/year. Business costs €10,455/year; Enterprise is billed at a custom price.
Is there a free plan or trial?
There is no free plan. A technical trial is available by contacting Mobexa; the team onboards the customer, scans one application and provides an evidence bundle.
Which mobile platforms does Mobexa cover?
It analyzes Android and iOS applications.
What app formats can I submit?
Mobexa accepts Android APK, AAB and XAPK files, iOS IPA files and store URLs.
Can Mobexa be self-hosted?
Yes. It is available as managed SaaS, a private instance or fully self-hosted inside the customer’s perimeter.
What integrations and evidence exports are available?
Integrations include CI/CD, ticketing and issue tracking, SIEM and log pipelines, identity providers, chat notifications, REST APIs and webhooks. Evidence can be exported as PDF, structured JSON, SARIF 2.1.0 and SBOM formats.
Facts from Mobexa's own pages
- Access controls
- The platform provides OpenID Connect single sign-on, role-based access control, per-tenant isolation and append-only audit logging. · mobexa.io, 1 Oct 2026
- Deployment
- Mobexa is available as managed SaaS, a private instance or fully self-hosted inside the customer's perimeter with the same scanning engine. · mobexa.io, 1 Oct 2026
- Dynamic testing
- Dynamic analysis runs applications on an emulated device and observes network calls, storage, permissions and inter-app communication. · mobexa.io, 1 Oct 2026
- Exports
- Scan evidence can be exported as PDF, structured JSON, SARIF 2.1.0 and SBOM formats. · mobexa.io, 1 Oct 2026
- Headquarters
- Istanbul, Türkiye · mobexa.io, 28 Sept 2026
- Integrations
- Mobexa supports CI/CD pipelines, ticketing and issue tracking, SIEM and log pipelines, identity providers, chat notifications, REST APIs and webhooks. · mobexa.io, 1 Oct 2026
- Product
- Mobexa is a mobile application security platform that continuously tests Android and iOS applications with static, dynamic and runtime analysis. · mobexa.io, 1 Oct 2026
- Runtime instrumentation
- Runtime instrumentation hooks live function calls to verify controls such as certificate pinning, root detection and data protection. · mobexa.io, 1 Oct 2026
- Security compliance
- Mobexa states that ISO/IEC 27001 is certified, GDPR and KVKK are compliant, SOC 2 Type I is in progress, and SOC 2 Type II is planned. · mobexa.io, 1 Oct 2026
- Static analysis
- Mobexa analyzes Android and iOS application packages, including bytecode, native libraries, manifests, resources and signing information, without requiring source code. · mobexa.io, 1 Oct 2026
- Supply chain
- The platform generates a software bill of materials and matches dependencies against recognized vulnerability sources. · mobexa.io, 1 Oct 2026
- Supported packages
- Mobexa accepts Android APK, AAB and XAPK files and iOS IPA files, plus store URLs. · mobexa.io, 1 Oct 2026
- Trial
- A technical trial is available by contacting Mobexa; the team onboards the customer, scans one application and provides the evidence bundle. · mobexa.io, 1 Oct 2026