NowSecure Platform
nowsecure.com
What it is
NowSecure Platform gives organizations visibility into security, privacy, AI, compliance, and software supply-chain risks in mobile apps they build, use, or manage. It analyzes compiled Android and iOS binaries and runs apps on physical devices to observe runtime behavior such as network activity, storage, permissions, and data movement. Findings can include decompiled code, data-flow traces, runtime captures, and the technique used to produce them. The platform checks static flags against runtime behavior, raising corroborated findings and lowering the priority of those that runtime tests cannot reproduce. It produces a CycloneDX mobile software bill of materials based on components observed in the shipped binary, and maps findings to OWASP MASVS controls, MASWE weaknesses, and MASTG testing techniques. NowSecure describes the platform as cloud-deployed and lists CI/CD, issue-tracking, security-tool, and Slack integrations, along with REST and GraphQL APIs. Its integrations page reports more than 200 integrations. Pricing is available on request, with no public price stated.
Spec sheet
- Purpose
- NowSecure Platform provides enterprise visibility into security, privacy, AI, compliance, and software supply-chain risks in mobile apps organizations build, use, or manage.Read 30 Sep 2026 · nowsecure.com
- Intended users
- The product page describes evidence and workflows for mobile security engineers, AppSec leaders, CISOs, privacy teams, and auditors.Read 30 Sep 2026 · nowsecure.com
- Deployment
- NowSecure describes the Platform as deployed in the cloud.Read 30 Sep 2026 · nowsecure.com
- Integrations
- Listed integrations include GitHub Actions, GitLab, Jenkins, CircleCI, Azure DevOps, Bitrise, Jira, GitHub Issues, Azure Boards, Brinqa, ThreadFix, CodeDX, and Slack.Read 30 Sep 2026 · nowsecure.com
- Support
- The published support tiers provide Help Center documentation and ticket submission; Pro and Enterprise include a 99.5% availability commitment and live product support during standard U.S. business hours.Read 30 Sep 2026 · nowsecure.com
- Headquarters
- Chicago, Illinois, United StatesRead 28 Sep 2026 · nowsecure.com
- Founded
- 2009Read 28 Sep 2026 · nowsecure.com
- APIs
- NowSecure provides REST and GraphQL APIs for programmatic integration with the Platform.Read 30 Sep 2026 · support.nowsecure.com
- Correlation
- The platform cross-validates static flags against runtime behavior, raising corroborated findings and down-ranking findings runtime testing cannot reproduce.Read 30 Sep 2026 · nowsecure.com
- Finding evidence
- Findings can include decompiled code, data-flow traces, runtime captures, and the testing technique that produced them.Read 30 Sep 2026 · nowsecure.com
- Integration coverage
- The integrations page states that it supports more than 200 integrations and that custom connectors are available through Professional Services for eligible support tiers.Read 30 Sep 2026 · nowsecure.com
- Mobile SBOM
- It produces a CycloneDX mobile software bill of materials with an AI layer based on components observed in the shipped binary.Read 30 Sep 2026 · nowsecure.com
- Security and compliance
- NowSecure states that its Platform has SOC 2 Type 2 compliance and that its laboratory holds ISO/IEC 17025:2017 accreditation for MASA and OWASP MASVS Level 1 assessment.Read 30 Sep 2026 · nowsecure.com
- Standards
- Findings are mapped to OWASP MASVS controls, MASWE weaknesses, and MASTG testing techniques.Read 30 Sep 2026 · nowsecure.com
- Testing
- It analyzes compiled Android and iOS binaries and runs apps on real physical devices to observe runtime behavior, including network activity, storage, permissions, and data movement.Read 30 Sep 2026 · nowsecure.com
Plans and prices
Strong points and limits
Strong points
- Tests compiled Android and iOS apps on physical devices.
- Findings can include runtime and data-flow evidence.
- Maps findings to OWASP mobile security references.
- Provides REST and GraphQL APIs.
- More than 200 integrations are reported.
Limits
- Pricing is available only on request.
- The platform is cloud-deployed.
- Custom connectors depend on eligible support tiers.
Who it suits
The product page identifies mobile security engineers, AppSec leaders, CISOs, privacy teams, and auditors as intended users. It suits organizations assessing mobile-app risks in development or management workflows.
Verdict
NowSecure Platform combines binary analysis with runtime observation and evidence-linked findings. Organizations considering it need to request pricing; no public price is stated.
Where Specifiction places it
- Mobile Application Security Testing Software#12 of 217.5
- Interactive Application Security Testing Software#10 of 147.0