Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Quokka

#5 of 21 in Mobile Application Security Testing Software

Quokka: Binary-first mobile AppSec with deep analysis, broad integrations, and contact-sales pricing. Ranked #5 of 21 in Mobile Application Security Testing Software by our editors (8.9/10); pricing: Pricing on request · 30-day trial; best for binary-first enterprise mobile AppSec.

8.9/10Editor score
Quokka8.9 Visit Quokka

At a glance

  • Editor score
    8.9 / 10
  • Pricing
    Pricing on request · 30-day trial
  • Best for
    Binary-first enterprise mobile AppSec
  • Mobile platforms
    Both
  • Founded
    2011
  • Facts checked
    22 Sep 2026
Quokka screenshot
  • Where it wins

    • Analyzes compiled or obfuscated binaries without source code
    • Combines static, dynamic, interactive, and forced-path testing
    • Covers supply-chain risk, SBOMs, sensitive data, and compliance mapping
  • Where it doesn't

    • Paid pricing requires contacting sales
    • Cloud deployment may not suit on-premises requirements
    • Support channels are limited to documentation

Our verdict on Quokka

Quokka provides mobile application security testing and risk intelligence for enterprises, government agencies, regulated organizations, and DevSecOps teams. Its Q-mast product analyzes iOS and Android applications, including compiled or obfuscated binaries, without requiring source code. The platform covers static analysis, dynamic runtime behavior, interactive execution, forced-path testing, sensitive data, network communication, storage, embedded libraries, malicious behavior, and supply-chain risks. It also supports app vetting and Android firmware security analysis, making it suited to organizations assessing mobile applications across development and operational environments.

Its strongest distinction is the breadth of binary-first analysis. Teams can examine applications without source code while combining static and runtime perspectives, then review software bills of materials, embedded-library risks, privacy concerns, and compliance mapping to mobile security standards. AI features are available, and the product is designed for cloud deployment. This focus should appeal to mid-market and enterprise organizations that need more than basic vulnerability scanning, particularly when application binaries come from internal teams, suppliers, or third parties.

Quokka also fits established development and security workflows through integrations with Azure DevOps, GitHub, GitLab, Jenkins, Snyk, Appium, Microsoft Intune, Hexnode UEM, Ivanti Neurons for MDM, and Microsoft Sentinel. Pricing uses a contact-sales model, with an evaluation period of up to 30 days rather than a perpetual free plan. The product is a strong match for organizations seeking broad mobile AppSec coverage and workflow integration. Teams needing publicly posted paid plans, non-cloud deployment, or support beyond documentation should consider other options.

Your product? Our editors can test Quokka in depth and publish a review, labelled as paid · from $149/mo →

Quokka pricing

Plans Pricing on request · 30-day trial No free plan — trial or paid only. Prices checked 22 Sep 2026.
See plans on quokka.io

Quokka fact sheet

Free planNot verified
Paid fromNot verified
Mobile platformsBoth
Static binary analysisYes
Dynamic app analysisYes
Sensitive-data flowYes
Deployment modelCloud
Included appsNot verified
Free trial30 days
DeploymentCloud
PlatformsWeb
Compliance & securitySOC 2
SupportDocs
Built forMid-market, Enterprise (editorial estimate)
Integrations10 integrations: Azure DevOps, GitHub, GitLab, Jenkins, Snyk, Appium … See all →
PricingPricing on request · 30-day trial
Websitequokka.io
Facts checked22 Sep 2026

Quokka integrations

Quokka lists 10 integrations on its own site.

  • Azure DevOps
  • GitHub
  • GitLab
  • Jenkins
  • Snyk
  • Appium
  • Microsoft Intune
  • Hexnode UEM
  • Ivanti Neurons for MDM
  • Microsoft Sentinel

See all Quokka integrations →

Alternatives to Quokka

See all Quokka alternatives →

Quokka vs the competition

Compare Quokka with any tool side by side →

Used Quokka? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Quokka for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — Quokka 8.9/10

Quokka is listed in our Mobile Application Security Testing Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/quokka/"><img src="https://www.itechguides.com/best/badge/quokka.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update