appaudix

Founded by Dean Mcdonald

Run automated penetration tests on real Android and iOS devices

Cost

Paid

Rating

★ People love it

Time to value

Quick Setup (< 1 hour)

You can use appaudix to run automated security penetration tests against real Android and iOS devices without needing source code. Upload an APK, AAB, or IPA file, and it runs your app on actual rooted or jailbroken hardware to find vulnerabilities like insecure storage, hardcoded secrets, weak TLS, and SSL pinning issues. It returns attacker evidence, replay traces, and specific fix guidance. You can integrate it into CI/CD pipelines to test every build automatically against frameworks like OWASP MASVS, PCI-DSS, HIPAA, and SOC 2.

What appaudix does

Upload an APK, AAB, or IPA file to start a security scanRun SSL pinning bypass and MITM attack tests on a real deviceView attacker evidence and replay traces for each discovered vulnerabilitySelect compliance frameworks like MASVS, HIPAA, or SOC 2 for a targeted auditIntegrate scanning into GitHub Actions CI/CD with a single workflow stepFail a build automatically when findings exceed a set severity thresholdDownload PDF, HTML, or SARIF reports for each completed scanRerun scans after applying fixes to confirm vulnerabilities are resolvedRuns your actual app binary on real rooted and jailbroken Android and iOS hardwareNo source code required - upload APK, AAB, or IPA files directlyProvides replay traces and affected request details alongside each findingAI agent chains individual findings into multi-step attack pathsIntegrates into GitHub Actions CI/CD to block releases on configurable severity thresholdsSupports seven compliance frameworks including OWASP MASVS, PCI-DSS, HIPAA, GDPR, SOC 2Returns copy-paste fix guidance compatible with AI coding tools like Cursor or ClaudeDelivers results in under an hour instead of weeks