Mobexa vs Quokka
Mobexa
mobexa.io
Quokka
quokka.ioSide by side
| Figure | Mobexa | Quokka |
|---|---|---|
| Price from | €195.50/mo | — |
| Free plan | — | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| iOS | — | Yes |
| Android | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 3 | 3 |
| Spec score · Mobile Application Security Testing Software | 8.1 (#8) | 7.7 (#10) |
| Integrations | Mobexa supports CI/CD pipelines, ticketing and issue tracking, SIEM and log pipelines, identity providers, chat notifications, REST APIs and webhooks. | Quokka lists Microsoft Intune, Hexnode UEM, and Ivanti Neurons for MDM for Q-scout, and Azure DevOps, GitHub, GitLab, Jenkins, Snyk, and Appium for Q-mast. |
| Product | Mobexa is a mobile application security platform that continuously tests Android and iOS applications with static, dynamic and runtime analysis. | Quokka provides mobile app security testing, mobile app vetting, and Android firmware security analysis. |
| Security compliance | Mobexa states that ISO/IEC 27001 is certified, GDPR and KVKK are compliant, SOC 2 Type I is in progress, and SOC 2 Type II is planned. | Quokka says it is SOC 2 compliant and invites customers to contact it for a copy of its SOC 2 report. |
| Supply chain | The platform generates a software bill of materials and matches dependencies against recognized vulnerability sources. | Quokka generates software bills of materials to identify embedded libraries, vulnerable components, and dependencies. |
Plans
In their own words
Quokka
Quokka is a cloud platform for mobile application security testing, app vetting, and Android firmware analysis. Q-mast examines iOS and Android binaries without source code, combining static, dynamic, interactive, and forced-path execution, including obfuscated and signed builds. It checks standards and formats including NIAP, NIST, OWASP MASVS, CVEs, and SARIF, and connects with GitHub, GitLab, Jenkins, Azure DevOps, Appium, and Snyk. Q-scout performs cloud-based risk assessments for Android and iOS apps, works off-device without agents, integrates with Microsoft Intune, Hexnode UEM, and Ivanti Neurons for MDM, and supports rules based on behavior, permissions, SDKs, and network activity. Q-firm analyzes pre-installed, hidden, and privileged Android firmware applications. Quokka also creates software bills of materials identifying libraries, vulnerable components, and dependencies. Findings can map to NIAP, NIST, OWASP MASVS, and GDPR requirements. The company states SOC 2 compliance and offers a free app security report. Pricing is available on request, with a 30-day trial.