Mobile applications are a convenient way for your users to access information, but they can also be a way for attackers to access theirs. Our mobile application penetration testing service finds any vulnerabilities that attackers could exploit to bypass security measures, putting your users’ information and privacy at risk.
Our scalable SaaS solution reforms traditional mobile application penetration testing, harnessing the power of both automated scanning and integrated expert penetration testing to provide business-critical security insights and efficient attack surface management in a single platform.
View your mobile application penetration testing results instantly from day one instead of waiting weeks for your report
Add additional team members and set up alerts and integrate Informer into your remediation workflow with integrations
One-click retesting allows you to validate identified vulnerabilities that you have fixed for added assurance
Our specialist penetration testers use a combination of automated and manual testing to assess iOS and Android applications. The OWASP Mobile Security Guide and eWPT methodologies are used together with our own proprietary methodology and checks.
Our testing approach has two main objectives; to security assess the installed mobile app, and the APIs that manage the information that is sent to and from the app.
All mobile application security tests cover a wide range of tests that assess the security robustness of the installed app and the app service APIs.
The following areas are included in mobile security testing:
Each testing phase builds upon the other that results in the full attack surface of the web application and gives you the information that you need to action and reduce your security risk:
Successful application security testing is dependent upon mapping the entire app’s functionality and touchpoints from an unauthenticated perspective and from an end user’s perspective.
Vulnerabilities are identified by exploiting them. We go beyond the OWASP and advise on defence-in-depth security approaches so that you can strengthen the application if a vulnerability was introduced.
In-depth dynamic security testing with multiple user levels gives us greater application visibility and coverage. This approach gives us access to wide-ranging functionality that could contain a variety of vulnerabilities that lead to sensitive information exposure.
The web app penetration testing service is delivered through our Informer platform. You can start to remediate vulnerabilities as soon as our testers find them and connect Informer to Jira for automatic ticket creation for your developers to get to work on fixing issues without the need to access Informer.
A summary of the test is provided for each test and gives you a non-technical overview of the results of the test.
For each vulnerability discovered, Informer provides a:
If you would like a PDF penetration testing report, you can download that in a number of report formats at any time during or after the test.
We go beyond providing reports by offering a comprehensive debrief session so our penetration testing team can discuss the findings. This is a great opportunity for you and your security, IT, and development teams to ask any questions or seek additional advice.
Informer is a CREST Penetration Testing accredited company. We invest in our team to ensure our pen testing methodologies, knowledge, skills, and experience are at the forefront of mobile application penetration testing.
does the app detect that the device has been jailbroken/rooted?
assesses permissions to the device’s components
identifies sensitive data present on the device
app enforcement of user authorization
potential manipulation of app to subvert protection
assess suitable authentication e.g. 2FA implementation
If you have any further questions, get in touch with our friendly team.
Yes. Our penetration testing labs are set up for Apple (iOS) and Android environments, so we can test applications on both platforms.
We will test a self-registration process and the account verification process to give you and your customers confidence in your security/keep you and your customers assured.
We will reverse engineer the application where we can look for evidence regarding how the application has been developed and also for hardcoded sensitive information, such as API keys and credentials.
Mobile application penetration testing is the process of assessing and identifying a mobile app’s vulnerabilities and security issues to improve both safety and security.