Quixxi Scan vs Zimperium zScan
Quixxi Scan
quixxi.com
Zimperium zScan
zimperium.comSide by side
| Figure | Quixxi Scan | Zimperium zScan |
|---|---|---|
| Price from | $24.92/mo | — |
| Free plan | — | — |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| iOS | Yes | Yes |
| Android | Yes | Yes |
| API | — | Yes |
| Plans published | 10 | 0 |
| Spec score · Mobile Application Security Testing Software | 7.8 (#9) | 7.5 (#14) |
| CI/CD | The SAST page says automated continuous scanning can be integrated into a CI/CD pipeline. | Zimperium describes zScan as integrating into CI/CD workflows with automated testing and security gates. |
| Compliance | The SAST page says the product aligns with GDPR guidelines, addresses OWASP Mobile Top 10 risks, assists with PCI DSS requirements, and incorporates NIST recommended practices. | The product page displays OWASP, MASVS, PCI, HIPAA, GDPR, and NIAP framework marks. |
| Headquarters | Sydney, New South Wales, Australia | Dallas, Texas, United States |
| Intended users | The partner page describes the services as intended for mobile app developers and organizations with significant numbers of mobile app users. | Zimperium describes the solution as built for security, compliance, and development teams. |
Plans
Quixxi Scan
- API Scan — One-off$29, paid once
- SAST Scan — One-off$29, paid once
- API Scan — Monthly$49 a month
- SAST Scan — Monthly$49 a month
- DAST Scan — One-off$199, paid once
- API Scan — Yearly$299 a year
- Shield — One-off$399, paid once
- SAST Scan — Yearly$499 a year
- Shield — Monthly$599 a month
- Shield — Yearly$5,999 a year
In their own words
Quixxi Scan
Quixxi Scan assesses Android and iOS app security through static and dynamic analysis, with recommendations for addressing vulnerabilities. SAST analyzes apps to identify risks, explain them and suggest fixes; automated continuous scanning can be integrated into a CI/CD pipeline. DAST examines app behavior, including SSL pinning, root detection, sensitive data, endpoint identity, encryption, copy and paste, and screenshots. A separate API Scan checks for issues such as injection attacks, authentication flaws, cross-site scripting and insecure direct object references. The service runs in the cloud and is available on Android, iOS and the web. The site offers a free SAST trial and a free app scan link, but does not state a trial duration. One-off SAST and API scans cost $29 as a one-time purchase; DAST costs $199, paid once. Monthly SAST and API scans cost $49 a month. The pricing article says there is no unlimited monthly DAST plan, and custom plans can be based on selected apps and modules. Quixxi says the product aligns with GDPR guidelines, addresses OWASP Mobile Top 10 risks, assists with PCI DSS requirements and incorporates NIST practices.
Zimperium zScan
Zimperium zScan scans mobile applications for security, privacy, protection, and compliance gaps. It uses static, dynamic, and interactive analysis, with the product page saying results are available in 15–30 minutes. Teams can submit IPA, APK, or AAB files, or an App Store URL; native and hybrid app stacks are supported. Findings may include descriptions, code snippets, affected locations, and recommendations, with reports available in a dashboard and as PDF or machine-readable JSON. An AI Insights panel offers contextual guidance and configuration fixes. zScan examines third-party components, SDKs, and SBOMs for supply chain risks and unexpected AI usage. It also checks whether anti-tampering, obfuscation, runtime protection, encryption, and SSL pinning are effectively implemented. Zimperium describes CI/CD workflows with automated testing and security gates; GitHub Actions can scan merges and pull requests and surface findings in GitHub Advanced Security code scanning alerts. The cloud service is described as requiring no infrastructure setup or tuning. Pricing is on request, and the free 30-day trial offers unlimited mobile app scans, with account access provided after approval.