Freedom251 › Mobile Application Security Testing Software
Tungstenic
What Tungstenic is
Tungstenic is a mobile application security analysis platform for Android and iOS apps. It analyzes APK and IPA binaries through static analysis, dynamic testing, and AI-assisted vulnerability detection. Static analysis examines app manifests, dex files, binaries, metadata, bundled components, mobile protections, RASP, and biometric and antifraud SDKs. Dynamic analysis uses real and emulated devices and includes Frida, MITM, IPC, and deep-link probes. The product says its team verifies vulnerabilities through real exploitation, then provides technical and executive evidence, including step-by-step details, screenshots, and video. AI-assisted triage investigates findings, assesses impact, and ranks them by exploitability and CVSS; workflows can involve pentesters or run fully automated in CI/CD, with traceable analysis steps. The assessment process covers client information upload, app analysis, vulnerability confirmation and tracking, retesting, and report generation. Clients can use alerts, comments, feedback, and remediation tracking. Tungstenic aligns its methods with OWASP MASVS, MASWE, and MSTG and references CVSS v3.1. It serves sectors including fintech, banking, gaming, healthcare, and automotive. Developed by Just Mobile Security, the platform is available by request, with visitors invited to request access or book a demo.
Who it suits
Tungstenic suits organizations that need security assessments of Android or iOS apps, particularly in the fintech, banking, gaming, healthcare, or automotive sectors. It is also aimed at teams that want vulnerability evidence, retesting, remediation tracking, or AI-assisted analysis in CI/CD workflows.
What it does well
- Analyzes both Android and iOS app binaries.
- Combines static, dynamic, and AI-assisted analysis.
- Verifies vulnerabilities through real exploitation.
- Provides technical and executive reports with screenshot and video evidence.
- Supports pentester-led or automated CI/CD workflows.
- Includes vulnerability alerts and remediation tracking.
What to know first
- Access is by request or demo.
- Pricing is available on request.
- The listed platform is web.
Getting started
- Visit https://tungstenic.com/en.
- Request access or book a demo.
- Share client information and APK or IPA files for the assessment workflow.
- Review findings, evidence, and reports, then track remediation and retesting.
Verdict
Choose Tungstenic if your team needs mobile app security analysis with exploit verification, evidence-rich reporting, and remediation tracking. Look elsewhere if you need a publicly stated price or a platform beyond the web offering.
Questions
Which mobile apps does Tungstenic analyze?
It analyzes Android and iOS applications using APK and IPA binaries.
How much does Tungstenic cost?
Pricing is on request; the product pages invite visitors to request access or book a demo.
What analysis methods does it use?
Tungstenic combines static analysis, dynamic analysis on real and emulated devices, and AI-assisted vulnerability detection.
What evidence and reports does it provide?
It says it generates technical and executive reports with detailed vulnerability evidence, including screenshots and video of exploits.
Which standards does Tungstenic reference?
Its methods align with OWASP MASVS, MASWE, and MSTG, and reference CVSS v3.1.
Who makes Tungstenic?
Tungstenic is described as a mobile security platform developed by Just Mobile Security.
Facts from Tungstenic's own pages
- Access
- The product pages invite visitors to request access or book a demo; they do not display a price on those pages. · tungstenic.com, 8 Oct 2026
- AI triage
- AI-assisted analysis investigates and assesses impact, ranks findings by exploitability and CVSS, and supports pentester-in-the-loop and fully automated CI/CD workflows. · tungstenic.com, 8 Oct 2026
- AI workflow
- The site says AI-assisted triage supports pentester-in-the-loop and fully automated CI/CD workflows, with traceable analysis steps. · tungstenic.com, 9 Oct 2026
- Analysis methods
- It combines static analysis (SAST), dynamic analysis (DAST), and AI-assisted vulnerability detection. · tungstenic.com, 9 Oct 2026
- Assessment workflow
- Its assessment pipeline includes APK/IPA analysis, vulnerability confirmation, tracking, retesting, and report generation. · tungstenic.com, 9 Oct 2026
- Audience
- The maker identifies fintech, banking, gaming, healthcare, and automotive as sectors it serves. · tungstenic.com, 8 Oct 2026
- Availability
- The product page invites users to request access and does not state a public price on that page. · tungstenic.com, 9 Oct 2026
- Client collaboration
- The product includes vulnerability alerts and tracking, comments and feedback, and ongoing remediation tracking. · tungstenic.com, 9 Oct 2026
- Dynamic analysis
- Dynamic analysis uses runtime probes to assess applications while they run. · tungstenic.com, 9 Oct 2026
- Evidence
- The assessment guarantees include step-by-step exploit evidence with screenshots and video. · tungstenic.com, 9 Oct 2026
- Exploit verification
- The product page says its experts verify each vulnerability through real exploitation and provide technical and executive evidence. · tungstenic.com, 9 Oct 2026
- Focus and audience
- The company describes its work as 100% mobile-focused and names fintech, banking, gaming, healthcare, and automotive among the sectors it serves. · tungstenic.com, 9 Oct 2026
- Founded
- 2019 · tungstenic.com, 28 Sept 2026
- Headquarters
- Cheyenne, Wyoming, United States · tungstenic.com, 28 Sept 2026
- Integrations
- The maker says findings ship into the client's tracker and Tungstenic, but does not name a specific tracker integration on the page. · tungstenic.com, 8 Oct 2026
- Maker
- The maker site identifies Just Mobile Security as the developer of Tungstenic. · justmobilesec.com, 9 Oct 2026
- Product
- Tungstenic is a mobile application security analysis platform for Android and iOS apps. · tungstenic.com, 9 Oct 2026
- Purpose
- Tungstenic analyzes Android and iOS app binaries (APK and IPA) using static, dynamic, and AI-assisted methods. · tungstenic.com, 8 Oct 2026
- Reporting
- It generates technical and executive reports with detailed evidence for each vulnerability. · tungstenic.com, 9 Oct 2026
- Reports
- It says it generates technical and executive reports with detailed vulnerability evidence, including screenshots and video evidence of exploits. · tungstenic.com, 8 Oct 2026
- Standards
- The contact page lists OWASP MASVS, OWASP MASWE, OWASP MSTG, and CVSS v3.1 as standards or frameworks Tungstenic aligns with. · tungstenic.com, 9 Oct 2026
- Static analysis
- Static analysis examines app structure, metadata, bundled components, mobile protections, RASP, and biometric and antifraud SDKs. · tungstenic.com, 8 Oct 2026
- Static analysis coverage
- Static analysis examines app manifests, dex files, and binaries. · tungstenic.com, 9 Oct 2026
- Support
- The contact page says a mobile security engineer replies within 24 hours and offers an optional NDA and a 30-minute scope call. · tungstenic.com, 9 Oct 2026