Freedom251 › Mobile Application Security Testing Software
WASViking Mobile Security Assessment
Visit WASViking Mobile Security Assessment Alternatives Pricing
What WASViking Mobile Security Assessment is
WASViking Mobile Security Assessment analyzes uploaded Android and iOS application packages against the OWASP Mobile Application Security Verification Standard (MASVS). It accepts Android APK and AAB files and iOS IPA files, then performs more than 200 checks across areas such as configuration, transport, cryptography, storage, platform exposure, binary hardening, components, and embedded secrets. The service builds a CycloneDX software bill of materials from the shipped application and matches components against published advisories and the CISA KEV catalog. Findings include an attack path, prerequisites, and the inputs behind the risk score. Release comparisons identify findings that were fixed, introduced, or carried forward, including dependency changes. Mobile results enter the same workflow as web and API findings, with an owner, severity, SLA, audit trail, and export. Findings map to OWASP MASVS, MASTG, CWE, and the OWASP Mobile Top 10; legacy MASVS requirement identifiers are supported. The assessment is an optional add-on quoted by scope, with pricing depending on targets, modules, and deployment. Evaluation begins with a guided demo followed by scans against targets the customer authorizes.
Who it suits
This assessment suits teams evaluating uploaded Android or iOS packages against MASVS and tracking mobile findings alongside web and API results. Pricing is quoted by scope, and evaluation uses customer-authorized targets.
What it does well
- Accepts Android APK and AAB, plus iOS IPA files
- Performs more than 200 checks across MASVS groups
- Creates a CycloneDX bill of materials
- Compares findings across releases
- Maps findings to OWASP, CWE, and compliance controls
What to know first
- Pricing is quoted based on scope
- Assessment is an optional add-on
- Evaluation requires a guided demo and sales-assisted scans
Limits
The assessment is an optional add-on quoted by scope. Its price depends on targets, modules, and deployment; the Starter plan covers up to five targets, while the other listed plans are custom or have no target limit stated.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Business | Custom plan · Mobile Security Assessment is an add-on quoted by scope | On request |
| Starter | Up to 5 targets · Mobile Security Assessment is an add-on quoted by scope | On request |
| Enterprise | Custom plan · Mobile Security Assessment is an add-on quoted by scope | On request |
| Pro | Mobile Security Assessment is an add-on quoted by scope | On request |
As wasviking.com lists them, read 8 Oct 2026. The maker's own page has the final word.
Getting started
- Open the WASViking Mobile Security Assessment page.
- Request a guided demo and quote.
- Work with WASViking on a sales-assisted evaluation using scans against targets you authorize.
- Upload an Android APK or AAB, or an iOS IPA, for assessment.
Verdict
WASViking Mobile Security Assessment combines mobile package checks, component tracking, and release comparisons in an established findings workflow. Organizations should account for its scope-based add-on pricing and sales-assisted evaluation.
Questions
Which mobile packages does it accept?
It accepts Android APK and AAB files and iOS IPA files.
How is the Mobile Security Assessment priced?
It is an optional add-on quoted by scope. Pricing depends on targets, modules, and deployment.
Does WASViking offer a free plan or trial for this add-on?
The listed plan information does not describe a free plan or trial for the Mobile Security Assessment.
Does the assessment analyze apps dynamically?
No. Dynamic app analysis is listed as unavailable; the assessment performs static binary analysis.
How does evaluation begin?
Evaluation starts with a guided demo, followed by a sales-assisted evaluation using scans against targets the customer authorizes.
Which standards and controls do findings map to?
Findings map to OWASP MASVS, MASTG, CWE, and the OWASP Mobile Top 10. The page also describes evidence mapped to PCI DSS v4.0, ISO 27001:2022, NIST CSF 2.0, GDPR, and LGPD controls.
Facts from WASViking Mobile Security Assessment's own pages
- Binary storage security
- WASViking says uploaded mobile application binaries are stored with server-side AES-256 encryption. · wasviking.com, 8 Oct 2026
- Company security status
- WASViking states that its product supports compliance work for GDPR, LGPD, PCI DSS v4.0, ISO 27001, and BACEN, while the company is working toward SOC 2 Type I and ISO 27001 certification. · wasviking.com, 8 Oct 2026
- Compliance evidence
- The page describes mobile assessment evidence mapped to PCI DSS v4.0, ISO 27001:2022, NIST CSF 2.0, GDPR, and LGPD controls. · wasviking.com, 8 Oct 2026
- Coverage
- The engine performs more than 200 checks across every MASVS group, including configuration, transport, cryptography, storage, platform exposure, binary hardening, components, and embedded secrets. · wasviking.com, 8 Oct 2026
- Evaluation
- WASViking says an engagement starts with a guided demo, followed by a sales-assisted evaluation using scans against targets the customer authorizes. · wasviking.com, 8 Oct 2026
- Finding context
- Findings include an attack path, prerequisites, and the inputs used to produce the risk score. · wasviking.com, 8 Oct 2026
- Headquarters
- Orlando, Florida, USA · wasviking.com, 28 Sept 2026
- Package formats
- The assessment accepts Android APK and AAB files and iOS IPA files. · wasviking.com, 8 Oct 2026
- Pricing
- Mobile Security Assessment is listed as an optional add-on, quoted based on scope and enabled for the organization by WASViking; the site says pricing depends on targets, modules, and deployment. · wasviking.com, 8 Oct 2026
- Purpose
- Mobile Security Assessment analyzes uploaded Android or iOS packages against the OWASP Mobile Application Security Verification Standard (MASVS). · wasviking.com, 8 Oct 2026
- Release comparison
- The service compares releases by finding identity and reports what was fixed, introduced, or carried forward, including dependency changes. · wasviking.com, 8 Oct 2026
- SBOM
- It creates a CycloneDX software bill of materials from the shipped application and matches components against published advisories and the CISA KEV catalog. · wasviking.com, 8 Oct 2026
- Standards mapping
- Findings map to OWASP MASVS, MASTG, CWE, and the OWASP Mobile Top 10; legacy MASVS requirement identifiers are also supported. · wasviking.com, 8 Oct 2026
- Support
- The demo and quote page says the team will respond within one business day. · wasviking.com, 8 Oct 2026
- Workflow
- Mobile findings enter the same workflow as web and API results, with an owner, severity, SLA, audit trail, and export. · wasviking.com, 8 Oct 2026