Appknox vs Quokka
Appknox
appknox.com
Quokka
quokka.ioSide by side
| Figure | Appknox | Quokka |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| iOS | Yes | Yes |
| Android | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 3 | 3 |
| Spec score · Mobile Application Security Testing Software | 8.1 (#6) | 7.7 (#10) |
| Founded | 2014 | 2011 |
| Integrations | Listed integrations include Azure Pipelines, Jenkins, CircleCI, App Center Build, Bitbucket Pipelines, Bitrise, GitHub Actions, GitLab, and ArmorCode. | Quokka lists Microsoft Intune, Hexnode UEM, and Ivanti Neurons for MDM for Q-scout, and Azure DevOps, GitHub, GitLab, Jenkins, Snyk, and Appium for Q-mast. |
| Product | Appknox is a mobile application security testing platform combining automated vulnerability assessment, penetration testing, SBOM generation, and app store monitoring. | Quokka provides mobile app security testing, mobile app vetting, and Android firmware security analysis. |
| Support | Its contact page says smart chat is available 24/7 and the support team responds within 24 working hours. | Quokka provides a customer support link from its website navigation. |
Plans
Appknox
- AdvancedPriced on request
- ProfessionalPriced on request
- StarterPriced on request
In their own words
Appknox
Appknox is a mobile application security testing platform for Android and iOS apps. It combines automated vulnerability assessment, penetration testing, software bill of materials generation, and app store monitoring. Automated assessment includes static analysis, dynamic analysis, and API security testing; users can start by uploading an app binary without providing source code. It supports apps made with Flutter, React Native, Xamarin, and Ionic. Teams can run scans, retrieve reports, and manage security operations through a command-line tool and public APIs. Listed integrations include Azure Pipelines, Jenkins, CircleCI, App Center Build, Bitbucket Pipelines, Bitrise, GitHub Actions, GitLab, and ArmorCode. Findings can be mapped to frameworks including GDPR, PCI-DSS v4.0, HIPAA, NIST, SAMA, DORA, CWE, and OWASP standards. Appknox offers on-premise and private-cloud deployment for local data residency needs. It says scans of the same app are unlimited, with pricing based on the number of unique apps assessed. Pricing is on request, and a free trial is available.
Quokka
Quokka is a cloud platform for mobile application security testing, app vetting, and Android firmware analysis. Q-mast examines iOS and Android binaries without source code, combining static, dynamic, interactive, and forced-path execution, including obfuscated and signed builds. It checks standards and formats including NIAP, NIST, OWASP MASVS, CVEs, and SARIF, and connects with GitHub, GitLab, Jenkins, Azure DevOps, Appium, and Snyk. Q-scout performs cloud-based risk assessments for Android and iOS apps, works off-device without agents, integrates with Microsoft Intune, Hexnode UEM, and Ivanti Neurons for MDM, and supports rules based on behavior, permissions, SDKs, and network activity. Q-firm analyzes pre-installed, hidden, and privileged Android firmware applications. Quokka also creates software bills of materials identifying libraries, vulnerable components, and dependencies. Findings can map to NIAP, NIST, OWASP MASVS, and GDPR requirements. The company states SOC 2 compliance and offers a free app security report. Pricing is available on request, with a 30-day trial.