NowSecure is a mobile application security company. It helps enterprises and government agencies test the mobile apps they build and vet the third-party apps they use, looking for security flaws, privacy leaks and hidden AI risk before those apps reach employees or customers.
Its customers are development, security and governance teams that need the same evidence about an app whether they built it or bought it.
At A Glance
| Vendor | NowSecure |
|---|---|
| Category | Mobile application security testing (DevSecOps) |
| Deployment | Hosted platform with an Open API; testing on real physical devices |
| Agentic AI | Mobile AI inventory and App Intents testing |
| Customers | Warner Bros. Discovery, Bell Canada, U.S. Department of Justice, Genisys Credit Union, Camelot Lottery |
| Certifications | SOC 2 Type 2; NIAP, ISO 17025 and Google MASA lab credentials |
| Market classification | DevSecOps |
What NowSecure Does
Mobile apps carry risk in two directions: the apps an organisation ships to its own customers, and the third-party apps its staff install and use. NowSecure gives continuous visibility into the security, privacy, AI, compliance and supply chain risk in the apps a company builds, uses or manages.
Rather than reading source code, it examines the compiled app exactly as shipped and watches how it behaves on real devices. That way the findings describe what users actually install, including the third-party SDKs bundled into it, and automation and human testers can work from the same results.
Products
NowSecure Platform
The platform provides continuous, automated mobile app security testing for development and security teams that release apps often. It runs each app on physical hardware through authenticated workflows, with no emulators, and maps findings to OWASP MASVS using MASTG aligned techniques. Every finding is stored with its decompiled code, data-flow trace and runtime capture. The platform also produces a CycloneDX mobile SBOM, with an AI layer, built from the app that actually ships.
AI-Navigator
Many scanners stop at the login screen. AI-Navigator handles login flows, multi-step transactions and conditional screens on real devices without any scripting, so testing reaches the risks that hide behind authentication.
AI Security
AI Security is for teams that need to know where AI has crept into their mobile portfolio. It maps AI components and their data flows inside apps and builds a mobile AI inventory by app, component, data type, destination, owner and risk. On iOS, App Intents determine what Siri AI can see and do inside an app. The NowSecure Platform inventories those App Intents, showing which app functions an AI assistant could trigger. Across apps NowSecure assessed from June through August 2026, roughly one in four had functionality that Siri AI could potentially reach.
Workstation And Penetration Testing Services
Workstation is a toolkit for mobile app penetration testers who want to do manual analysis themselves. Organisations that would rather have specialists do the work can use NowSecure’s expert-led penetration tests, also offered as Mobile PTaaS.
Mobile Risk Intelligence
Mobile Risk Intelligence feeds app risk data into existing security, risk and governance workflows, and its reports can support audit and regulatory work.
How It Works
Analysis runs against the compiled app.
| Binary analysis | The app is analysed as shipped, which also forms the basis of the dynamic SBOM. |
|---|---|
| Real-device runtime | The app runs on physical devices rather than emulators, and AI is identified across app code, SDKs, APIs, embedded models and runtime data flows. |
| Data-flow tracing | The SBOM records each component and where its data goes. |
| Open API | Teams can drive the platform programmatically through an Open API, documented in a Platform API Reference. |
Integrations
| Area | Integrations |
|---|---|
| CI/CD and developer tools | GitHub Actions, GitLab CI/CD, Jenkins, Azure DevOps, Bitrise, CircleCI |
| Ticketing and workflow | Jira, Azure Boards, Slack |
| Application security | Brinqa, Checkmarx |
| SIEM and analytics | NowSecure Mobile for Splunk |
Company Background
| Founder | Andrew Hoog |
|---|---|
| Headquarters | Chicago, United States |
| Leadership | Alan Snyder, CEO |
| Investors | Forgepoint, Baird Capital, Jump Capital and Math Venture Partners |
| Track record | More than 15 years of mobile security work, 12,000+ penetration tests and 5M+ automated assessments |
Note: This overview is compiled from NowSecure’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.