Indusface WAS vs Quokka
Indusface WAS
indusface.com
Quokka
quokka.ioSide by side
| Figure | Indusface WAS | Quokka |
|---|---|---|
| Price from | $49.92/mo | — |
| Free plan | — | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| iOS | — | Yes |
| Android | — | Yes |
| API | — | Yes |
| Plans published | 4 | 3 |
| Spec score · Mobile Application Security Testing Software | 8.1 (#7) | 7.7 (#10) |
| Compliance | Indusface lists PCI DSS v4.0.1, ISO/IEC 27001:2022, GDPR compliance, SOC 2 Type II, and CERT-In security auditor empanelment. | Quokka says its findings can be mapped to NIAP, NIST, OWASP MASVS, and GDPR requirements. |
| Founded | 2004 | 2011 |
| Integrations | WAS can trigger scans on new CI/CD builds, create vulnerability tickets, and send scan logs to major SIEM providers. | Quokka lists Microsoft Intune, Hexnode UEM, and Ivanti Neurons for MDM for Q-scout, and Azure DevOps, GitHub, GitLab, Jenkins, Snyk, and Appium for Q-mast. |
| Product | Indusface WAS is an AI-powered dynamic application security testing scanner for web application security. | Quokka provides mobile app security testing, mobile app vetting, and Android firmware security analysis. |
| Support | WAS support is available 24×7×365 by email, phone, and chat on Premium; the page lists unlimited email support and business-hours on-call support for WAS. | Quokka provides a customer support link from its website navigation. |
Plans
Indusface WAS
- Advance$59 a month
- Advance$599 a year
- MSSP EditionPriced on request
- PremiumPriced on request
In their own words
Indusface WAS
Indusface WAS has no write-up on Specifiction yet; its figures are above.
Quokka
Quokka is a cloud platform for mobile application security testing, app vetting, and Android firmware analysis. Q-mast examines iOS and Android binaries without source code, combining static, dynamic, interactive, and forced-path execution, including obfuscated and signed builds. It checks standards and formats including NIAP, NIST, OWASP MASVS, CVEs, and SARIF, and connects with GitHub, GitLab, Jenkins, Azure DevOps, Appium, and Snyk. Q-scout performs cloud-based risk assessments for Android and iOS apps, works off-device without agents, integrates with Microsoft Intune, Hexnode UEM, and Ivanti Neurons for MDM, and supports rules based on behavior, permissions, SDKs, and network activity. Q-firm analyzes pre-installed, hidden, and privileged Android firmware applications. Quokka also creates software bills of materials identifying libraries, vulnerable components, and dependencies. Findings can map to NIAP, NIST, OWASP MASVS, and GDPR requirements. The company states SOC 2 compliance and offers a free app security report. Pricing is available on request, with a 30-day trial.