Appknox vs Quixxi Scan

Appknox is a mobile application security testing platform for Android and iOS apps. It combines automated vulnerability assessment, penetration testing, software bill of materials generation, and app store monitoring. Automated assessment includes static analysis, dynamic analysis, and API security testing; users can start by uploading an app binary without providing source code. It supports apps made with Flutter, React Native, Xamarin, and Ionic. Teams can run scans, retrieve reports, and manage security operations through a command-line tool and public APIs. Listed integrations include Azure Pipelines, Jenkins, CircleCI, App Center Build, Bitbucket Pipelines, Bitrise, GitHub Actions, GitLab, and ArmorCode. Findings can be mapped to frameworks including GDPR, PCI-DSS v4.0, HIPAA, NIST, SAMA, DORA, CWE, and OWASP standards. Appknox offers on-premise and private-cloud deployment for local data residency needs. It says scans of the same app are unlimited, with pricing based on the number of unique apps assessed. Pricing is on request, and a free trial is available.

Quixxi Scan assesses Android and iOS app security through static and dynamic analysis, with recommendations for addressing vulnerabilities. SAST analyzes apps to identify risks, explain them and suggest fixes; automated continuous scanning can be integrated into a CI/CD pipeline. DAST examines app behavior, including SSL pinning, root detection, sensitive data, endpoint identity, encryption, copy and paste, and screenshots. A separate API Scan checks for issues such as injection attacks, authentication flaws, cross-site scripting and insecure direct object references. The service runs in the cloud and is available on Android, iOS and the web. The site offers a free SAST trial and a free app scan link, but does not state a trial duration. One-off SAST and API scans cost $29 as a one-time purchase; DAST costs $199, paid once. Monthly SAST and API scans cost $49 a month. The pricing article says there is no unlimited monthly DAST plan, and custom plans can be based on selected apps and modules. Quixxi says the product aligns with GDPR guidelines, addresses OWASP Mobile Top 10 risks, assists with PCI DSS requirements and incorporates NIST practices.