Static analysis
The build, unpacked and read before it ever runs.
- Manifest, permissions, and exported components
- Hard-coded keys, tokens, and endpoints
- Weak cryptography and unsafe WebViews
- Bundled third-party libraries
Coming soon · Early access
agentred/mobile
What your app does, not says.
Static and dynamic security analysis for Android apps, aligned to how the application really behaves on a device.
Android first
AR / MOBILE
com.example.wallet- Manifest & permissions
- Exported components
- Hard-coded secrets
- Local storage
- Network traffic
Dynamic analysis
The app, exercised at runtime to see what it really does.
- Data written to files, databases, and logs
- Traffic to backend APIs and third parties
- Input handling across intents and deep links
- Behavior that only appears after login
What’s being built
- Android static analysis
Build-level review of the APK.
Planned - Android dynamic analysis
Runtime behavior on an instrumented device.
Planned - Mobile API testing
Backend APIs tested with the Web & APIs engine.
Planned - Verified reporting
Material findings confirmed before they’re reported.
Planned
Questions
Mobile, answered.
When will mobile analysis be available?
Mobile analysis is in development. Request early access and we’ll contact you when it opens.
Which platforms are supported?
Android is the first supported platform. Let us know your other platforms when you request early access.
Do you need source code?
No. Analysis starts from the build you provide. Source access can be added through the Source code service.
One platform
Explore every surface.
01</>
Web & APIs
Application and API penetration testing across the paths attackers actually use.
02{}
Source code
AI-assisted security review that follows risk across code, dependencies, and CI/CD.
03CL
Cloud
Cloud posture and misconfiguration assessment across AWS, Google Cloud, and hosts reached over SSH.
- AWS
- Google Cloud
- SSH
04MB
Mobile
Static and dynamic mobile security analysis aligned to real application behavior.