Zero False Positives SLA
Money-Back Guarantee for
a single false-positive
In-Depth Testing
Business logic testing, SANS Top 25,
PCI DSS & OWASP coverage
Actionable Reporting
Tailored remediation guidelines
and 24/7 access to analysts
Rapid Delivery SLA
Guaranteed execution schedule
and report delivery
DevSecOps Native
SDLC and CI/CD tools integration,
WAF for mobile backend flaws
How it works
DevSecOps Native
WAF Integrations
Mobile App Security
Static, dynamic and interactive
security testing with SCA
Mobile Backend Security
Comprehensive testing of
mobile app’s endpoints
Privacy and Encryption
Detailed analysis of privacy
and encryption problems
Black & White Box
Authenticated (including MFA/SSO)
or Black Box testing
Open Source Security
Software Composition Analysis (SCA)
tests for 20,000+ known CVE-IDs
Red Teaming
Breach and attack simulation per
MITRE ATT&CK® Mobile
- OWASP Mobile Security Testing Guide (MSTG)
- NIST SP 800-115 Technical Guide to Information Security Testing and Assessment
- PCI DSS Information Supplement: Penetration Testing Guidance
- MITRE ATT&CK® Matrices for Mobile and Enterprise
- FedRAMP Penetration Test Guidance
- ISACA’s How to Audit GDPR
- OWASP Application Security Verification Standard (ASVS v4.0.2) Mapping
- Common Vulnerabilities and Exposures (CVE) Compatible
- Common Weakness Enumeration (CWE) Compatible
- Common Vulnerability Scoring System (CVSS v3.1)
Most Comprehensive Mobile Penetration Testing
- Mobile Penetration Testing
- SANS Top 25 Full Coverage
- PCI DSS 6.5.1-6.5.10 Full Coverage
- OWASP Mobile Top 10 Full Coverage
- Backend Testing (REST/SOAP/GraphQL APIs)
- AI Augments Human Testing and Analysis
- Machine Learning Accelerates Testing
- Authenticated Testing (OTP / MFA)
- Business Logic Testing
- Privacy Review
- Full Customization of Testing
- Rapid Delivery SLA Money back
Contractual money-back guarantee for a delayed delivery date.
ImmuniWeb® MobileSuite Packages
1 Configure Your Test
Upload your mobile application,
indicate any special testing or
reporting requirements
2 Schedule Your Test
Select your package, schedule the
penetration testing dates and
report delivery date
3 Get Your Report
Browse the interactive dashboard,
export data in PDF and schedule
patch verification scan
| ImmuniWeb® MobileSuite | Corporate Pro Designed for mobile application of large size and complexity, with multiple endpoints (e.g. APIs or web services) or several user roles. | Corporate Designed for mobile application of medium size and complexity, with several endpoints (e.g. APIs or web services) or a couple of user roles. | Express Pro Designed for mobile application of small size and complexity, with one or two endpoints (e.g. APIs or web services) and one user role. | Express Designed for mobile application of very small size and complexity, with one main endpoint (e.g. API or web service) and one simple user role. |
|---|---|---|---|---|
| AI-Automated Penetration Testing Our award-winning Deep Learning AI technology accelerates and intelligently automates over 7,500 checks of your mobile application security, which usually require human labor and cannot be performed by traditional vulnerability scanners due to complexity. | 120 hours | 120 hours | 72 hours | 24 hours |
| Manual Testing of Business Logic Our CREST-accredited security experts conduct advanced security testing of your mobile application’s business logic, perform reverse engineering and exploitation of your mobile application backend (e.g. APIs or web services), and run other security and privacy checks that require human intelligence due to high complexity. | 4+ experts | 3+ experts | 2+ experts | 1 expert |
| Zero False Positives SLA Our Terms of Services provide contractual money-back guarantee for a single false positive in your penetration testing report. |  | | | |
| Rapid Delivery SLA Our Terms of Services provide contractual money-back guarantee for delayed delivery of your penetration testing report. | | | | |
| WAF Virtual Patching Our technology alliances with the leading WAF vendors provide ready-to-use WAF rulesets with your penetration testing report to automatically mitigate the vulnerabilities found in the backend (e.g. APIs or web services) of your mobile application. | | | | |
| DevSecOps & CI/CD Integrations Our technology alliances with the leading SIEM and DevOps vendors provide one-click vulnerability data export into your vulnerability management systems, bug trackers, as well as integration of penetration testing into your CI/CD pipeline. | | | | |
| 24/7 Access to our Security Analysts Our security analysts are at your disposal during and after the penetration test may you need any advice or additional information on remediation or implementation of security best practices. | | | | |
| Unlimited Patch Verification Scans Unlimited patch verification scans are available during 100 days after the delivery of your penetration testing report to verify that all of the detected vulnerabilities have been properly fixed by your software developers. | | | | |
| Privacy Assessment Our security experts examine widespread privacy issues and compliance failures in your mobile application. | | | | |
| Cross-Platform Apps Testing Corporate package is required for complex cross-platform applications (e.g. Xamarin Framework) as they usually require significantly more resources and human time for comprehensive testing. | | | ||
| Root or Jailbreak Detection Bypass Corporate Pro package is required if your mobile application has a protection against running on rooted or jailbroken devices. | | |||
| Emulator Detection Bypass Corporate Pro package is required if your mobile application prevents running on an emulator or requires to be tested on a real device. | | |||
| Certificate Pinning Bypass Corporate Pro package is required if your mobile application uses SSL certificate pinning technology. | | |||
| Code Obfuscation Bypass Corporate Pro package is required if your mobile application's code is obfuscated to prevent reverse-engineering. | | |||
| Red Teaming Exercise On request, our security experts may perform Red Teaming exercise tailored to your threat landscape, emulating tactics, techniques and procedures (TTP) of a specific cyber threat actor. | | |||
| Price | $9495 — | $7495 — | $3495 — | $1495 — |
ImmuniWeb is an efficient and very easy-to-use solution that combines automatic and human tests. The results are complete, straightforward and easy to understand. It’s an essential tool for the development of the new digital activities
Didier Ramella
CISO
ImmuniWeb is the best and simplest way to secure your business online. It's really fantastic experience to get report with zero false positive with detailed actions how to resolve problems and remove vulnerabilities. I think ImmuniWeb is definitely the best alternative to pen testers. As well as a way to save on staff and other costs. I am glad that I can get it all without any hidden costs and without complicated licensing schemes
Nika Vachridze
Senior Information Security Officer
We believe ImmuniWeb platform would definitely address the common weaknesses seen in manual assessments. The AI-assisted platform not only automates the assessments, but also, executes them in a continuous, consistent and reliable fashion. Admittedly, the platform would definitely add quick wins and great ROI to its customers on their investment.
Abuhaneefa Fayaz
Information Security Officer
ImmuniWeb provides accurate assessment on the security posture of our cloud-based applications. The report provided is concise and easy to read with sound advisories on the necessary steps to fix the issues. What impressed me most was that no false-positive was listed and the vulnerabilities are real. ImmuniWeb certainly gives us the right level of assurance that our cloud-based applications are safe and "good-to-go" before we deploy them out to production
Lee Chye Seng
Director, Learning Systems and Applications
ImmuniWeb is an invaluable tool for iPresent with both automated and manual penetration testing. The fantastic manual testing has found even the most hidden and complicated bugs in our security and ImmuniWeb has delivered first class knowledge. The self-service interface also gives us great control to schedule and monitor tests when we need them
Neil Bostrom
Chief Technical Officer
ImmuniWeb is a great innovative service that brings unbeatable ROI. It is undoubtedly the best way to quickly and easily guarantee your customers that their data is safe with you - and yours too by the way! Efficient and effective!
Jean-Michel Beylard-Ozeroff
Head of IT
