- Home
- AI Agent Security Software
- Silker AI Mobile Security
Silker AI Mobile Security
What it is
Silker AI Mobile Security protects the API behind iOS and Android apps and runs automated security assessments of the apps themselves. Its static assessment maps findings to the 2024 OWASP Mobile Top 10, assigns a security grade and 0–100 score, and gives remediation guidance for each finding. A scan can start from an app identifier and store listing without uploading source code or a binary; deeper binary analysis is on the roadmap. Listed checks cover insecure storage, cryptography, transport security, binary protections, and exposed components, with additional checks for iOS and Android settings. Runtime protection blocks malicious API requests with a 403, limits and bans abusive IPs, and redacts exposed personal information and secrets. It runs on the app's backend without requiring an app store release. Scans are saved so teams can track progress between releases. Starter includes one application, up to 10,000 requests per month, and one free scan. Pro is listed at $19.50 per month during a beta offer for the first three months, then $39/mo. The company was founded in 2024 and describes itself as onboarding its first design partners.
For and against
For
- Scans map findings to the 2024 OWASP Mobile Top 10.
- Reports include a security grade and 0–100 score.
- Runtime protections do not require an app store release.
- Scan history supports release-over-release tracking.
Against
- Deeper binary analysis is on the roadmap.
- Dynamic app analysis is listed as unavailable.
- GDPR status is marked in progress.
- Starter is limited to one application and 10,000 monthly requests.
The verdict
Silker combines static mobile assessments with backend API protections and saved scan history. Teams should note the stated roadmap limit on deeper binary analysis and review the beta pricing terms.
Who it suits
Silker suits teams responsible for API security and mobile app assessments on iOS and Android. It may fit teams seeking scans that do not begin with a source-code or binary upload.
Plans and prices
Pro
Up to 2 apps · 500k req / mo · AI Verdict & Copilot · Global Threat Map
Read 3 Oct 2026 · silkerai.com
Business
Up to 5 apps · Unlimited req / mo · Team seats & Google SSO · On-demand scans & Slack alerts
Read 3 Oct 2026 · silkerai.com
Enterprise
On-prem / self-hosted · Unlimited apps & requests · SAML SSO · SIEM export
Read 3 Oct 2026 · silkerai.com
Starter
1 application · Up to 10,000 requests / mo · 1 free security scan · Community support
Read 3 Oct 2026 · silkerai.com
On the record
- Android checks
- The listed Android checks include manifest and exported components, Keystore and backup settings, cleartext traffic configuration, and Play Integrity and obfuscation.silkerai.com · read 3 Oct 2026
- Client-side checks
- The assessment checks risks including insecure storage, weak cryptography, transport security, binary protections, and exposed components.silkerai.com · read 3 Oct 2026
- Company
- Silker AI describes itself as an independent company founded in 2024 and made in Poland.silkerai.com · read 3 Oct 2026
- Intended users
- The maker says it is onboarding its first design partners and building closely alongside them.silkerai.com · read 3 Oct 2026
- iOS checks
- The listed iOS checks include App Transport Security, Keychain storage, App Attest and anti-tampering, and Universal Links validation.silkerai.com · read 3 Oct 2026
- Mobile assessment
- The automated static assessment maps findings to the 2024 OWASP Mobile Top 10 and provides a security grade, a 0–100 score, and per-finding remediation.silkerai.com · read 3 Oct 2026
- No upload to start
- A scan can start from the app identifier and store listing without uploading source code or a binary; deeper binary analysis is on the roadmap.silkerai.com · read 3 Oct 2026
- Purpose
- Silker protects the API behind iOS and Android apps from attacks and runs an automated penetration test against the app itself.silkerai.com · read 3 Oct 2026
- Report history
- Every scan is stored so teams can track progress release over release.silkerai.com · read 3 Oct 2026
- Runtime blocking
- Runtime protection blocks malicious API requests with a 403, rate limits and bans abusive IPs, and redacts leaking PII and secrets.silkerai.com · read 3 Oct 2026
- Runtime deployment
- Runtime blocking runs on the backend the app calls and does not require an app store release.silkerai.com · read 3 Oct 2026
- Security and compliance
- The site labels GDPR and SOC 2 as “In progress” and ISO 27001 as “Compliant.”silkerai.com · read 3 Oct 2026
