Q-mast
Q-mast: A broad, standards-focused testing suite for established mobile security teams. Ranked #13 of 21 in Mobile Application Security Testing Software by our editors (8.0/10); pricing: Pricing on request; best for established teams needing standards-based analysis.
At a glance
- Editor score8.0 / 10
- PricingPricing on request
- Best forEstablished teams needing standards-based analysis
- Mobile platformsBoth
- Founded2011
- Facts checked20 Sep 2026
Where it wins
- Analyzes compiled iOS and Android binaries without source code
- Combines static, dynamic, interactive, and forced-path analysis
- Maps findings to NIAP, NIST, OWASP MASVS, and other standards
Where it doesn't
- Pricing requires a contact-sales process
- The broad feature set may exceed narrow testing needs
- Teams seeking self-serve purchasing may prefer another option
Our verdict on Q-mast
Q-mast is Quokka’s automated mobile application security testing solution for security and development teams working with iOS and Android apps. It analyzes compiled application binaries without requiring source code, including obfuscated and protected builds. Its coverage spans static analysis, dynamic analysis on non-rooted and non-jailbroken devices, interactive analysis, forced-path execution, data-flow analysis, and post-deployment monitoring of app-store builds. That makes it a fit for established teams that need standards-based analysis across development and released applications.
Its strongest differentiator is the combination of analysis methods and supply-chain visibility. Q-mast can link runtime execution to application flows, execute scripted application paths, generate software bills of materials with version-specific components, and analyze SDK behavior and third-party dependencies. It also tests sensitive-data storage and network communication. Compliance mapping to NIAP, NIST, OWASP MASVS, and other standards gives teams a structured way to connect technical findings with security requirements.
Q-mast fits development workflows through integrations with GitHub, GitLab, Jenkins, Azure DevOps, Appium, and Snyk, alongside CI/CD and DevSecOps integrations. The product follows a demo-led, contact-sales purchasing model rather than a published tier structure. Teams looking for a broad mobile application security program with runtime, binary, SDK, compliance, and monitoring coverage should consider Q-mast. Organizations that need a narrow scanner, self-serve purchasing, or a simple entry-level workflow may find its scope and buying process less suitable.
Q-mast pricing
Q-mast fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Not verified |
| Mobile platforms | Both |
| Static binary analysis | Yes |
| Dynamic app analysis | Yes |
| Sensitive-data flow | Yes |
| Deployment model | Not verified |
| Included apps | Not verified |
| Compliance & security | SOC 2, GDPR, HIPAA, PCI DSS |
| Support | Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 6 integrations: GitHub, GitLab, Jenkins, Azure DevOps, Appium, Snyk See all → |
| Pricing | Pricing on request |
| Website | quokka.io |
| Facts checked | 20 Sep 2026 |
Q-mast integrations
Q-mast lists 6 integrations on its own site.
- GitHub
- GitLab
- Jenkins
- Azure DevOps
- Appium
- Snyk
Alternatives to Q-mast
- AppknoxBroad hybrid testing for teams securing mobile apps across the development lifecycle.9.4
- OstorlabBroad mobile AppSec coverage with freemium entry and cloud delivery.9.3
- NowSecure PlatformDeep mobile runtime and binary analysis for teams securing release pipelines.9.2
Used Q-mast? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Q-mast for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Q-mast is listed in our Mobile Application Security Testing Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/q-mast/"><img src="https://www.itechguides.com/best/badge/q-mast.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. How we rank.
Last updated · How we research and update