Meet us at Black Hat 2026

See what senior security leaders across finance, healthcare, high tech and retail report, how their answers compared to AI model predictions, and the strategic recommendations you need to close the gap.

2026 Mobile App Risk Management Survey promo image
New: AI-native capabilities built for the speed and risk of AI-driven app development. New: AI-native capabilities built for the speed and risk of AI-driven app development. Learn More.
magnifying glass icon

Mobile Security Solutions

Navigating the Digital Markets Act’s Impact on Mobile App Security

By Amy Schurr / February 21, 2024 / Comments Off on Navigating the Digital Markets Act’s Impact on Mobile App Security

Organizations can expect mobile application security and mobile app privacy risks to intensify across Europe when the Digital Markets Act regulation takes effect in March. Users within Europe will be able to download mobile apps from outside the trusted mobile ecosystems of the Apple App Store and Google Play Store. While new third-party app stores […]

Infographic: Unveiling OWASP MASVS Vulnerabilities by Industry

By Amy Schurr / January 24, 2024 / Comments Off on Infographic: Unveiling OWASP MASVS Vulnerabilities by Industry

NowSecure benchmark mobile application security testing reveals a staggering 95% of mobile apps fail at least one OWASP MASVS category, putting organizations at significant risk of data breaches and leaks.  The OWASP Mobile Application Security Verification Standard (MASVS) sets a minimum security and privacy bar for mobile security professionals and developers to follow when building […]

The Top 5 Mobile App Security Breaches of 2023

By Amy Schurr / December 20, 2023 / Comments Off on The Top 5 Mobile App Security Breaches of 2023

In today’s digital landscape, safeguarding mobile apps has become paramount. Mobile app breaches pose significant threats to data security and privacy. In addition, they erode user trust in apps and their respective developers, which in turn impacts the installed base and revenue.  Mobile application security testing can help organizations identify insecure coding practices, configuration errors […]

Decoding Apple Privacy Manifests for iOS Developers

By Amy Schurr / November 15, 2023 / Comments Off on Decoding Apple Privacy Manifests for iOS Developers

Developers of iOS apps and SDKs should mark their calendars for upcoming changes to Apple privacy requirements and block out time to familiarize yourselves with them to avoid App Store rejections. Apple announced at the Worldwide Developers Conference (WWDC) 2023 in June new initiatives to increase transparency about mobile app privacy. All mobile app developers […]

NowSecure Earns ISO Accreditation for Mobile Application Security Testing Services

By Tim Neighbors / November 1, 2023 / Comments Off on NowSecure Earns ISO Accreditation for Mobile Application Security Testing Services

In a significant milestone for mobile penetration testing, NowSecure proudly announces it recently attained ISO/IEC 17025:2017 accreditation from the esteemed American Association for Laboratory Accreditation (A2LA). Specifically, NowSecure Mobile Application Security Assessment services, which test OWASP MASVS Level 1, are accredited by the A2LA under ISO/IEC 17025.  This accolade solidifies the company’s position as a […]

Gartner Recognizes Mobile App Security Testing (MAST) Maturity

By Amy Schurr / September 6, 2023 / Comments Off on Gartner Recognizes Mobile App Security Testing (MAST) Maturity

As cyberattacks continue to mount in scale and sophistication, application security has never been more critical to enterprise businesses and public-sector agencies. The new Gartner report “Hype Cycle for Application Security, 2023” highlights the need to modernize application security programs with innovative technologies to help organizations develop secure code and guard against supply-chain risks. The […]

Key Security Considerations for AI Coding Assistants in Mobile DevSecOps

By Amy Schurr / August 23, 2023 / Comments Off on Key Security Considerations for AI Coding Assistants in Mobile DevSecOps

The rise of generative Artificial Intelligence (AI)-based tools has the potential to revolutionize software development. Many organizations have already embraced AI-powered coding assistants such as GitHub Copilot and ChatGPT to improve the developer experience and speed time to market. A recent McKinsey study found devs can complete coding tasks up to twice as fast with […]

How to Use DAST in a Mobile DevSecOps Pipeline

By Tim Neighbors / August 9, 2023 / Comments Off on How to Use DAST in a Mobile DevSecOps Pipeline

Does anyone need DAST?  That’s the question recently posed by founder, podcaster, threat modeling expert and security industry luminary Chris Romeo that sparked online debate and spawned a NowSecure DevSecOps Bunch webinar, “The Great Debate: Does DAST Work for DevSecOps?”  Misconceptions about DAST abound. In reality, organizations need a range of security tools and techniques […]

Secure Mobile App Development: Embracing Policy-Driven DevSecOps

By Tim Neighbors / July 26, 2023 / Comments Off on Secure Mobile App Development: Embracing Policy-Driven DevSecOps

Many organizations have embraced mobile DevSecOps by integrating automated mobile application security throughout the software development lifecycle. Baking security into the development process reduces risk, cuts costs and accelerates delivery of secure, high-quality mobile apps. A policy-based approach enables stakeholders to define and operationalize policy rules to meet internal, industry, app store and other requirements […]

Post-Quantum Cryptography (PQC) & Mobile App Security

By Tim Neighbors / June 12, 2023 / Comments Off on Post-Quantum Cryptography (PQC) & Mobile App Security

“Photo by FLO:D on Unpslash https://unsplash.com/photos/yQYQJaiypZE“ Technology advancements are constantly reshaping the way we communicate and conduct business. As the CTO of NowSecure, a mobile application security testing SaaS provider, I want to discuss a topic I believe is of timely relevance: post-quantum security and in particular within the mobile application context. The cryptographic landscape is […]