Appknox vs Reversense Security

Appknox is a mobile application security testing platform for Android and iOS apps. It combines automated vulnerability assessment, penetration testing, software bill of materials generation, and app store monitoring. Automated assessment includes static analysis, dynamic analysis, and API security testing; users can start by uploading an app binary without providing source code. It supports apps made with Flutter, React Native, Xamarin, and Ionic. Teams can run scans, retrieve reports, and manage security operations through a command-line tool and public APIs. Listed integrations include Azure Pipelines, Jenkins, CircleCI, App Center Build, Bitbucket Pipelines, Bitrise, GitHub Actions, GitLab, and ArmorCode. Findings can be mapped to frameworks including GDPR, PCI-DSS v4.0, HIPAA, NIST, SAMA, DORA, CWE, and OWASP standards. Appknox offers on-premise and private-cloud deployment for local data residency needs. It says scans of the same app are unlimited, with pricing based on the number of unique apps assessed. Pricing is on request, and a free trial is available.

Reversense Security analyzes mobile and embedded application binaries without requiring source code or manual reverse engineering. It can assess binaries and packaged apps from app stores or CI/CD pipelines, using IAST and fuzzing to uncover exploitable vulnerabilities and runtime attack paths. Its Dexcalibur engine combines static, dynamic, and symbolic analysis for deobfuscation and tailored investigations, including highly obfuscated apps. An integrated Dalvik virtual machine supports symbolic and concrete execution of bytecode that needs implicit context. Teams can monitor application-level network traffic, including HTTPS, without changing device network settings or bypassing SSL pinning; they can also monitor and tamper with application-level NFC commands. Multiple devices and apps can be instrumented within one project. Other functions include automated privacy reports for Android and iOS against GDPR, CRA, PCI, and CCPA referentials, and digital forensics to find where mobile apps store identity information. The free Dexcalibur Community Edition costs nothing and supports Android instrumentation generation and dynamic deobfuscation.