APK, AAB and IPA are the file formats that hold a shipped mobile app. APK (Android Package) and AAB (Android App Bundle) are the Android formats; IPA (iOS App Store Package) is the iOS format.
These files are exactly what an attacker downloads and what mobile security testing works from. They contain the compiled code, the manifest, resources and bundled libraries, so most security review starts by opening one of them.
Mobexa tests the exact Android or iOS build you ship and maps every finding to the OWASP Mobile Top 10 and MASVS.
Start Free Trial