Transparent pricing for continuous mobile application security testing
All paid plans ship with static, dynamic and runtime scanning (SAST, DAST and IAST), emulator-based dynamic testing, OWASP MASVS aligned coverage, evidence export and aligned controls for common regulatory frameworks. Scale from one application to a multi-brand portfolio without renegotiating the contract.
- Up to 2 production Android or iOS applications
- SAST, DAST and IAST scanning, up to 8 scans per month
- Runtime instrumentation (IAST) on instrumented emulator devices
- OWASP MASVS L1 coverage and MASTG-aligned methodology
- Secret detection with entropy and semantic classification
- Software bill of materials with transitive dependency risk
- Certificate pinning and network security configuration audit
- PDF and JSON report export
- Generic webhook for log and SIEM pipelines
- Role-based access, 2FA, audit log
- Email support, 1 business-day response target
- Everything in Starter, plus
- Up to 8 applications across brands or subsidiaries
- Up to 32 scans per month
- SAST + DAST + IAST on every scan (full triad coverage)
- OWASP MASVS L2 and MASVS-R (anti-reverse-engineering)
- Runtime analysis on instrumented emulator environments
- Live emulator access for hands-on dynamic testing
- 30+ ready-to-run Frida scripts (SSL pinning bypass, root/anti-debug detection, crypto and biometric hooks)
- Runtime hook presets: SSL pinning, root detection, crypto, anti-debug
- MASTG-aligned evidence bundle and custom taint rules
- Outbound integration with your CI, ticketing and SIEM destinations
- Priority support, 4-hour response target
- Everything in Business, plus
- Unlimited applications, sub-tenants and environments
- Dedicated single-tenant deployment (EU, TR or US regions, or air-gapped on-premise)
- Custom policy mapping, including NIST SSDF SP 800-218
- Quarterly threat model workshop and executive report
- Named technical account manager and quarterly roadmap alignment
- Custom DPA, SCCs, BAA (for HIPAA), master services agreement
- Security questionnaires (CAIQ, SIG Lite, Shared Assessments) pre-filled
- Penetration test reports under NDA
- 24/7 P1 response, 30-minute response target, dedicated hotline
Every paid plan includes: SAST, DAST and IAST scanning, OWASP MASVS alignment, software bill of materials, outbound webhook, PDF reports, SSO (SAML 2.0 and OIDC) on Business and above, 99.95% uptime target. Discounted multi-year terms available. Volume discounts for 50+ applications. Charity, academic and open-source discounts available on request.
Tax disclosure
All prices listed on this page are inclusive of any and all applicable indirect taxes (Value Added Tax, KDV, VAT, GST, sales tax, digital services tax, withholding contributions or equivalent levies) imposed in the customer's billing jurisdiction at the rate in force on the date of supply. Invoices issued for your Mobexa subscription itemise the taxable amount, applicable rate(s) and total tax in compliance with Turkish Vergi Usul Kanunu (Tax Procedure Law) Articles 230 and 397 and the e-Fatura / e-Arşiv tebliğleri (Communiques 509 and 535).
Türkiye. Listed prices include Katma Değer Vergisi (Value Added Tax) under Law No. 3065 (KDV Kanunu) at the rate in force on the supply date and are presented as a "tüm vergiler dahil satış fiyatı" (price inclusive of all taxes) in compliance with Law No. 6502 on the Protection of the Consumer and the Etiket Yönetmeliği (Labelling Regulation), Official Gazette 28.06.2014 / 29044, Article 6. If the statutory rate changes, the listed price remains unchanged and the seller's net retention is adjusted accordingly.
European Union. Prices include local VAT under Council Directive 2006/112/EC, calculated at the rate of the customer's billing country at the time of supply. Business customers established in another EU Member State may apply the reverse-charge mechanism (Art. 196 of the Directive) by entering a valid VAT identification number at checkout; in such case no VAT is charged by the seller and the customer self-accounts under Articles 194-199 of the Directive.
United Kingdom. Prices include UK VAT under the Value Added Tax Act 1994 at the rate in force on the supply date. Reverse charge available for B2B customers under section 8 of VATA 1994 with a valid GB-VAT registration.
Other jurisdictions. Where the seller is registered for indirect tax in the customer's country (including United States marketplace-facilitator states, Canada GST/HST/QST, Australia GST, New Zealand GST, Singapore GST, Japan JCT and the United Arab Emirates VAT), local tax is included in the listed price. Where the seller is not registered, the customer is solely responsible for any reverse-charge, self-assessment, withholding, import-equivalent or use-tax obligation arising under the customer's local tax law, and undertakes to indemnify the seller for any deficiency assessed by the customer's tax authority arising from the customer's mis-declaration of residence or tax-status at checkout.
The seller reserves the right to update list prices and tax-handling at any time. Updates apply only to billings made after the effective date of the change and do not retroactively affect existing subscriptions within their paid term. Currency conversions for non-EUR billings use the Türkiye Cumhuriyet Merkez Bankası (TCMB) effective forex selling rate on the date of the corresponding invoice. · Last updated: 2026-07-21
Need a customised proposal?
We respond to RFPs, RFIs and security questionnaires within two business days.