Mobile Application Penetration Test

$6,000.00

iOS and Android application testing covering the client, its local storage and the API backend behind it.

A mobile assessment has to cover three surfaces: the compiled client, the data it leaves on the device, and the API it talks to. We test all three, on real hardware.

What the engagement covers

Static and dynamic analysis of the compiled application
Local data storage, keychain and cache review
Transport security, certificate pinning and bypass testing
Runtime manipulation, hooking and anti-tamper review
Full testing of the backing API

What you receive

Platform-specific findings for iOS and Android
API findings with reproduction steps
Remediation guidance for mobile and backend developers
Live debrief with the product team
Free retest of all findings within 30 days

Typical duration: 8 to 12 business days
Pricing: the listed figure is a starting point; final price follows a scoping call and depends on the size of the environment.
Authorisation: testing begins only once a scope and authorisation letter is signed by an accountable owner of the systems in scope.

Request a scoping call