Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

QARK review

Free#19 of 21 in Mobile Application Security Testing Software

QARK gives Android teams broad static analysis and validation tools at no license cost.

7.0/10Editor score
Visit QARK
QARK7.0 Visit QARK

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

QARK, or Quick Android Review Kit, is an open-source command-line tool for identifying security vulnerabilities in Android applications. It is designed for developers, security reviewers, and information-security teams conducting Android application assessments. The tool performs static analysis of Java code and packaged APKs, parses AndroidManifest.xml files, decompiles APKs, and maps potentially tainted flows from sources to sinks. Its free, self-hosted model suits teams that want to inspect Android applications without a paid license or a hosted service.

Its standout feature is the range of analysis and validation functions in one command-line workflow. QARK supports JSON and other report formats, generated ADB commands for issue validation, and proof-of-concept APK generation. Headless mode also supports integration into a software development lifecycle, while multiple decompiler options extend its APK analysis capabilities. These features make it useful when a team needs more than a basic static scan and wants findings represented in formats or commands that can support follow-up investigation.

QARK’s focus is narrow: its platform coverage is Android, and its documented capabilities center on static analysis rather than dynamic analysis. Deployment is self-hosted across Windows, macOS, and Linux, so teams remain responsible for the local setup and operating environment. The published documentation describes an older Python and Android SDK environment, which may affect compatibility with current systems. Choose QARK for free Android-focused source and APK analysis, taint-flow mapping, and headless use. Teams needing broader mobile platform coverage or verified dynamic analysis should consider a different tool.

QARK pros and cons

  • Where it wins
    • Analyzes Java source code and compiled Android APKs
    • Maps tainted flows and supports multiple APK decompilers
    • Generates ADB commands, proof-of-concept APKs, and reports
  • Where it doesn't
    • Android-only coverage limits cross-platform mobile testing
    • Self-hosted deployment requires local environment management
    • Published documentation describes an older Python and Android SDK environment

QARK fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update