QARK
QARK: QARK gives Android teams broad static analysis and validation tools at no license cost. Ranked #19 of 21 in Mobile Application Security Testing Software by our editors (7.0/10); pricing: Free plan; best for android teams needing free open-source SAST.
At a glance
- Editor score7.0 / 10
- PricingFree plan
- Best forAndroid teams needing free open-source SAST
- Free planYes
- Paid fromFree
- Mobile platformsAndroid
- Founded2015 · Sunnyvale, California, United States
- Facts checked20 Sep 2026
Where it wins
- Analyzes Java source code and compiled Android APKs
- Maps tainted flows and supports multiple APK decompilers
- Generates ADB commands, proof-of-concept APKs, and reports
Where it doesn't
- Android-only coverage limits cross-platform mobile testing
- Self-hosted deployment requires local environment management
- Published documentation describes an older Python and Android SDK environment
Our verdict on QARK
QARK, or Quick Android Review Kit, is an open-source command-line tool for identifying security vulnerabilities in Android applications. It is designed for developers, security reviewers, and information-security teams conducting Android application assessments. The tool performs static analysis of Java code and packaged APKs, parses AndroidManifest.xml files, decompiles APKs, and maps potentially tainted flows from sources to sinks. Its free, self-hosted model suits teams that want to inspect Android applications without a paid license or a hosted service.
Its standout feature is the range of analysis and validation functions in one command-line workflow. QARK supports JSON and other report formats, generated ADB commands for issue validation, and proof-of-concept APK generation. Headless mode also supports integration into a software development lifecycle, while multiple decompiler options extend its APK analysis capabilities. These features make it useful when a team needs more than a basic static scan and wants findings represented in formats or commands that can support follow-up investigation.
QARK’s focus is narrow: its platform coverage is Android, and its documented capabilities center on static analysis rather than dynamic analysis. Deployment is self-hosted across Windows, macOS, and Linux, so teams remain responsible for the local setup and operating environment. The published documentation describes an older Python and Android SDK environment, which may affect compatibility with current systems. Choose QARK for free Android-focused source and APK analysis, taint-flow mapping, and headless use. Teams needing broader mobile platform coverage or verified dynamic analysis should consider a different tool.
Your product? Our editors can test QARK in depth and publish a review, labelled as paid · from $149/mo →
QARK pricing
QARK fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Mobile platforms | Android |
| Static binary analysis | Yes |
| Dynamic app analysis | Not verified |
| Sensitive-data flow | Yes |
| Deployment model | Self_hosted |
| Included apps | Not verified |
| Deployment | Self-hosted |
| Platforms | Windows, macOS, Linux |
| Support | Community |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Pricing | Free plan |
| Website | github.com |
| Facts checked | 20 Sep 2026 |
Alternatives to QARK
- AppknoxBroad hybrid testing for teams securing mobile apps across the development lifecycle.9.4
- OstorlabBroad mobile AppSec coverage with freemium entry and cloud delivery.9.3
- NowSecure PlatformDeep mobile runtime and binary analysis for teams securing release pipelines.9.2
Used QARK? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used QARK for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
QARK is listed in our Mobile Application Security Testing Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/qark/"><img src="https://www.itechguides.com/best/badge/qark.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update