← Back to Services & Pricing

Mobile Pentest

From €1,200

Manual testing for a single platform, single-role app.

A manual penetration test of your iOS or Android application: authentication, local data storage, and the backend APIs it talks to. Static and dynamic analysis on real devices/emulators, aligned with the OWASP Mobile Application Security Verification Standard (MASVS).

What's included

• Authentication and session handling on the device
• Local data storage and insecure storage checks
• Network communication and certificate pinning review
• Testing of the backend APIs the app depends on
• Detailed report with evidence and remediation guidance

Scope tiers

• Essential — single platform, single role, limited feature set
• Professional — one platform (iOS or Android) with multiple roles or a larger feature set
• Custom — both iOS and Android, multiple roles, or specific compliance requirements

Every engagement is scoped and quoted individually based on the platform(s), number of roles, and the complexity of the backend APIs involved.