AppAudix - Agentic AI Mobile App Pen Testing
appaudix™ · Cybersecurity & IT
Certification per AWS Marketplace.
Evidence tier Source Confirmed · 4 captures on record
What the publisher says
As described on AWS Marketplace.
AppAudix is an AI-native mobile application security testing (MAST) platform purpose-built for enterprises, development teams, and security professionals who need to ensure their mobile applications meet rigorous compliance and security standards.
Multi-Framework Compliance Scanning
Show the rest of the publisher’s description (35 more lines)
Scan your mobile apps against 7+ compliance frameworks simultaneously:
- PCI-DSS 4.0.1 - Payment Card Industry Data Security Standard
- OWASP MASVS - Mobile Application Security Verification Standard
- HIPAA - Healthcare data protection requirements
- GDPR - European data privacy regulations
- SOC 2 - Service Organization Control security criteria
- NIST - Cybersecurity Framework controls
- LGPD - Brazilian General Data Protection Law
AI-Powered Security Analysis
Our AI-native engine goes beyond traditional static analysis:
- Intelligent vulnerability detection with contextual understanding
- AI-generated remediation guidance with code examples
- Automated risk prioritization based on exploitability
- Natural language security findings for developer clarity
Enterprise AI Penetration Testing
Enterprise plans include AI-driven dynamic analysis that autonomously:
- Installs and explores your app on real Android emulators
- Validates static findings with runtime evidence
- Discovers runtime-only vulnerabilities
- Captures screenshots and proof-of-concept evidence
- Generates executive-ready penetration test reports
Platform Support
- Android: APK and AAB (Android App Bundle) files up to 2GB
- iOS: IPA files with full binary analysis
- Automatic AAB-to-APK conversion using Google's bundletool
Developer & DevSecOps Integration
- RESTful API for CI/CD pipeline integration
- Webhook notifications for scan completion
- Multiple report formats: PDF, HTML, JSON, SARIF
- SARIF export for GitHub/GitLab Security dashboard integration
- Real-time scan progress with live findings feed
Plans
- Pro: 20 scans/month, all compliance frameworks, email support
- Enterprise: Unlimited scans, API access, AI penetration testing, priority support, dedicated onboarding
Trusted by fintech companies, healthcare organizations, and Fortune 500 enterprises to secure their mobile applications before they reach production.
Highlights
Highlighted by the publisher on AWS Marketplace.
AI-native security engine with intelligent vulnerability detection, contextual remediation guidance, and automated penetration testing for Android and iOS apps
Multi-framework compliance scanning: PCI-DSS 4.0.1, OWASP MASVS, HIPAA, GDPR, SOC 2, NIST, and LGPD - all in a single scan
Enterprise-ready with REST API for CI/CD integration, SARIF export for GitHub/GitLab Security, webhooks, and real-time scan progress streaming
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Plans and pricing as listed
8 listed- Units
- Units
- Units
- Units
- Units
- Units
- Units
- Units
Refund terms
As stated by the publisher on AWS Marketplace.
AppAudix offers a 14-day money-back guarantee for all subscription plans. If you are not satisfied with the service within the first 14 days of your subscription, contact support@appaudix.com for a full refund. Refunds are not available after 14 days or for partially used billing periods. Annual subscriptions may be cancelled at any time, but refunds are only available within the first 14 days. For enterprise customers with custom agreements, refund terms are defined in the applicable contract.
Sources
Linked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.