- Home
- Mobile Application Security Testing Software
- WASViking Mobile Security Assessment
WASViking Mobile Security Assessment
Orlando, Florida, USA
What it is
WASViking Mobile Security Assessment analyzes uploaded Android and iOS application packages against the OWASP Mobile Application Security Verification Standard (MASVS). It accepts Android APK and AAB files and iOS IPA files, then performs more than 200 checks across areas including configuration, transport, cryptography, storage, platform exposure, binary hardening, components, and embedded secrets. The service creates a CycloneDX software bill of materials from the application and checks components against published advisories and the CISA KEV catalog. Findings include an attack path, prerequisites, and the inputs used for the risk score. Release comparisons identify findings that were fixed, introduced, or carried forward, as well as dependency changes. Mobile findings enter the same workflow as web and API results, with an owner, severity, SLA, audit trail, and export. Results map to OWASP MASVS, MASTG, CWE, and the OWASP Mobile Top 10. The assessment is an optional add-on priced by scope, targets, modules, and deployment; pricing is on request. Evaluation starts with a guided demo and then a sales-assisted evaluation using scans against customer-authorized targets. Uploaded binaries are stored with server-side AES-256 encryption.
For and against
For
- More than 200 mobile application checks
- Accepts APK, AAB, and IPA packages
- Creates a CycloneDX software bill of materials
- Compares findings across releases
Against
- Dynamic app analysis is not offered
- Pricing depends on scope and is on request
- Evaluation includes a guided demo and sales-assisted stage
The verdict
WASViking Mobile Security Assessment provides broad static checks, component review, and release comparisons for mobile packages. Organizations should account for the scope-based add-on pricing and the guided, sales-assisted evaluation.
Who it suits
The assessment may suit organizations evaluating Android or iOS application security against MASVS and seeking findings within a workflow shared with web and API results. It is an optional, quoted add-on rather than a separately priced listed plan.
Plans and prices
Business
Custom plan · Mobile Security Assessment is an add-on quoted by scope
Read 8 Oct 2026 · wasviking.com
Enterprise
Custom plan · Mobile Security Assessment is an add-on quoted by scope
Read 8 Oct 2026 · wasviking.com
Pro
Mobile Security Assessment is an add-on quoted by scope
Read 8 Oct 2026 · wasviking.com
Starter
Up to 5 targets · Mobile Security Assessment is an add-on quoted by scope
Read 8 Oct 2026 · wasviking.com
On the record
- Binary storage security
- WASViking says uploaded mobile application binaries are stored with server-side AES-256 encryption.wasviking.com · read 8 Oct 2026
- Company security status
- WASViking states that its product supports compliance work for GDPR, LGPD, PCI DSS v4.0, ISO 27001, and BACEN, while the company is working toward SOC 2 Type I and ISO 27001 certification.wasviking.com · read 8 Oct 2026
- Compliance evidence
- The page describes mobile assessment evidence mapped to PCI DSS v4.0, ISO 27001:2022, NIST CSF 2.0, GDPR, and LGPD controls.wasviking.com · read 8 Oct 2026
- Coverage
- The engine performs more than 200 checks across every MASVS group, including configuration, transport, cryptography, storage, platform exposure, binary hardening, components, and embedded secrets.wasviking.com · read 8 Oct 2026
- Evaluation
- WASViking says an engagement starts with a guided demo, followed by a sales-assisted evaluation using scans against targets the customer authorizes.wasviking.com · read 8 Oct 2026
- Finding context
- Findings include an attack path, prerequisites, and the inputs used to produce the risk score.wasviking.com · read 8 Oct 2026
- Package formats
- The assessment accepts Android APK and AAB files and iOS IPA files.wasviking.com · read 8 Oct 2026
- Pricing
- Mobile Security Assessment is listed as an optional add-on, quoted based on scope and enabled for the organization by WASViking; the site says pricing depends on targets, modules, and deployment.wasviking.com · read 8 Oct 2026
- Purpose
- Mobile Security Assessment analyzes uploaded Android or iOS packages against the OWASP Mobile Application Security Verification Standard (MASVS).wasviking.com · read 8 Oct 2026
- Release comparison
- The service compares releases by finding identity and reports what was fixed, introduced, or carried forward, including dependency changes.wasviking.com · read 8 Oct 2026
- SBOM
- It creates a CycloneDX software bill of materials from the shipped application and matches components against published advisories and the CISA KEV catalog.wasviking.com · read 8 Oct 2026
- Standards mapping
- Findings map to OWASP MASVS, MASTG, CWE, and the OWASP Mobile Top 10; legacy MASVS requirement identifiers are also supported.wasviking.com · read 8 Oct 2026
- Support
- The demo and quote page says the team will respond within one business day.wasviking.com · read 8 Oct 2026
- Workflow
- Mobile findings enter the same workflow as web and API results, with an owner, severity, SLA, audit trail, and export.wasviking.com · read 8 Oct 2026
