Today at Black Hat USA 2021 in Las Vegas, we unveiled the newest version of our flagship NowSecure Workstation mobile pen testing toolkit. NowSecure Workstation boosts pen tester productivity with deep-dive interactive and automated security testing of Android and iOS mobile apps.
NowSecure Workstation 7 delivers an updated UX with new advancements in productivity, performance and collaboration to speed the pen testing process while ensuring full security testing coverage, including complex mobile app scenarios and multi-factor and IoT-connected mobile apps. The toolkit offers the easiest to use, fastest, and most thorough mobile pen testing tools available.
Traditional mobile app penetration testing can consume at least two weeks of manual effort and requires ample expertise and an abundance of open-source tools. The inherent difficulty associated with penetration testing and cybersecurity staffing shortages impacting 56% of organizations means organizations are less likely to pen test their mobile apps and are subsequently at risk. The (ISC)2 Cybersecurity Workforce Survey also found that even though 97% of organizations report that pen testing is important to their organization, only 8% of overall cybersecurity resources are applied to pen testing. With limited resources and expertise, cybersecurity leaders must maximize productivity and efficiency of their pen testers through training and automation.
NowSecure Workstation and NowSecure Training Courseware provide a turnkey solution to help close mobile app pen testing resource gaps and can collapse a two- to three-week mobile app pen test to a single day. Security teams using NowSecure Workstation can expect 10x productivity gains and scalability.
“Mobile app security risk continues to grow, and a shortage of skilled mobile app pen testing resources hampers organizations’ ability to staff and complete manual mobile app security testing,” said NowSecure CEO Alan Snyder. “NowSecure Workstation 7 delivers a next- generation, modern experience enabling testers of any skill level to rapidly and deeply pen test their mobile apps to empower organizations to deliver secure mobile apps faster.”
NowSecure Workstation dramatically boosts pen tester productivity, collapses mobile app pen testing time, and enables security analysts with any amount of experience to thoroughly and efficiently test mobile applications.
The kit includes a laptop, two mobile devices and software for everything a mobile app pen tester needs right out of the box. It automates deep interactive testing using a mix of best-in-class tooling and open-source tools such as Frida, Radare, and r2Frida. With a battery of hundreds of mobile security and privacy compliance tests, an intuitive wizard-driven interface, and extensibility to work with advance tooling and configuration, NowSecure Workstation is the world’s first all-in-one mobile app pen tester tool kit and continues to lead the industry in ease of use, scalability, and cost-effectiveness.
Mobile appsec analysts who take advantage of NowSecure Workstation 7 can expect:
- A modern user experience with updated navigation and an intuitive wizard-driven interface to speed pen tester productivity no matter what skill level
- Enablement for complex testing scenarios including multi-factor authentication (MFA/2FA), CAPTCHA, IoT, USB and Bluetooth connected equipment
- Comprehensive mobile app test engine which combines static, dynamic, interactive and APISec testing with Frida, Radare and other advanced tooling
- Testing for industry security, privacy and compliance standards including OWASP, HIPAA, GDPR, CCPA, NIAP, FISMA, PCI and more
- Updated architecture which delivers performance improvements to enable teams to complete testing and reporting faster than ever before
- Findings with CVSS Scores, description, evidence and remediation instructions to speed understanding, priority and resolution
- Integration with NowSecure Platform to enable assessment report upload and collaborative sharing reports across teams
NowSecure Workstation is a core component of the NowSecure Solution Suite, the world’s most comprehensive suite for mobile app security including NowSecure Platform for continuous security testing in the development pipeline, NowSecure Workstation for pen tester productivity, NowSecure Supply Chain Risk Management, NowSecure Pen Testing Services and NowSecure Training Courseware for developers and security analysts. Built on a foundation of standards and automation, NowSecure empowers organizations to succeed by delivering secure mobile apps faster and by continuously monitoring their mobile app supply chains for risk. Top mobile innovators, global businesses and agencies trust NowSecure to secure their mobile apps including AT&T, Caribou Coffee, iRobot, MyOwnMed, Uber Vaporstream, Zoom and the U.S.Marshals Service.
You can learn more about NowSecure Workstation 7 in this announcement, request a demo online or contact us for more information. If you are attending BlackHat 2021, contact us to meet Live in Las Vegas or stop by our Virtual Booth online. And don’t miss this virtual session with NowSecure Researchers, “Cracking Fun with Frida & Radare: Mobile App & IoT Edition.”