Silker AI Mobile Security
silkerai.com
What it is
Silker AI Mobile Security protects APIs used by iOS and Android apps and assesses the apps themselves. Its automated static assessment maps findings to the 2024 OWASP Mobile Top 10, assigns a security grade and 0–100 score, and gives remediation for each finding. A scan can begin with an app identifier and store listing, without uploading source code or a binary; deeper binary analysis is listed as forthcoming. Checks cover insecure storage, cryptography, transport security, binary protections, and exposed components. iOS checks include App Transport Security, Keychain storage, App Attest, anti-tampering, and Universal Links. Android checks include manifests, exported components, Keystore and backup settings, cleartext traffic, Play Integrity, and obfuscation. Runtime protection blocks malicious API requests with a 403, rate-limits or bans abusive IPs, and redacts leaking personal information and secrets. It runs on the app’s backend and does not require an app-store release. Scans are retained for release-to-release tracking. Android, iOS, and web access are listed. The free plan is available; paid plans start at $39/mo.
Spec sheet
- Purpose
- Silker protects the API behind iOS and Android apps from attacks and runs an automated penetration test against the app itself.Read 3 Oct 2026 · silkerai.com
- Intended users
- The maker says it is onboarding its first design partners and building closely alongside them.Read 3 Oct 2026 · silkerai.com
- Founded
- 2024Read 28 Sep 2026 · silkerai.com
- Company
- Silker AI describes itself as an independent company founded in 2024 and made in Poland.Read 3 Oct 2026 · silkerai.com
- Android checks
- The listed Android checks include manifest and exported components, Keystore and backup settings, cleartext traffic configuration, and Play Integrity and obfuscation.Read 3 Oct 2026 · silkerai.com
- Client-side checks
- The assessment checks risks including insecure storage, weak cryptography, transport security, binary protections, and exposed components.Read 3 Oct 2026 · silkerai.com
- iOS checks
- The listed iOS checks include App Transport Security, Keychain storage, App Attest and anti-tampering, and Universal Links validation.Read 3 Oct 2026 · silkerai.com
- Mobile assessment
- The automated static assessment maps findings to the 2024 OWASP Mobile Top 10 and provides a security grade, a 0–100 score, and per-finding remediation.Read 3 Oct 2026 · silkerai.com
- No upload to start
- A scan can start from the app identifier and store listing without uploading source code or a binary; deeper binary analysis is on the roadmap.Read 3 Oct 2026 · silkerai.com
- Report history
- Every scan is stored so teams can track progress release over release.Read 3 Oct 2026 · silkerai.com
- Runtime blocking
- Runtime protection blocks malicious API requests with a 403, rate limits and bans abusive IPs, and redacts leaking PII and secrets.Read 3 Oct 2026 · silkerai.com
- Runtime deployment
- Runtime blocking runs on the backend the app calls and does not require an app store release.Read 3 Oct 2026 · silkerai.com
- Security and compliance
- The site labels GDPR and SOC 2 as “In progress” and ISO 27001 as “Compliant.”Read 3 Oct 2026 · silkerai.com
Plans and prices
Strong points and limits
Strong points
- Maps findings to the 2024 OWASP Mobile Top 10
- Starts scans without source-code or binary uploads
- Blocks malicious requests with a 403
- Supports iOS and Android-specific checks
- Stores scans for release-to-release tracking
Limits
- Deeper binary analysis is still on the roadmap
- Paid plans start at $39/mo
- Runtime protection requires the app backend
Who it suits
It suits teams securing mobile APIs and applications across iOS and Android. The listed design-partner onboarding and release history fit teams tracking security changes over time.
Verdict
Silker AI combines mobile-app assessment with backend runtime blocking and release history. Its free plan and no-upload starting scan lower the entry barrier, while deeper binary analysis remains unavailable.
Where Specifiction places it
- AI Agent Security Software#9 of 317.2
- Mobile Application Security Testing Software#15 of 217.2