03330 500 111 hello@evalian.co.uk
Client Portal
LearnIQ
SecureIQ
REQUEST FREE CONSULTATION
CREST Member Badge 2025 Transparent Background (1)
CREST ST Acceditation PenetrationTesting Badge
CREST ST Acceditation VulnerabilityAssessment Badge
CREST ST Acceditation MobileAppSecurityTesting Badge
CREST ST Acceditation AppSecurityTesting Badge white

CREST OVS Accredited Mobile App Testing

Secure your mobile applications with penetration testing services delivered by our CREST and OSCP-qualified testers.

Our services cover iOS and Android applications and authenticated and unauthenticated testing.

We’ll provide a detailed report, recommendations, a telephone debrief and post-test guidance.

We will also provide you with a free retest for remediated issues.

Book your organisation’s Mobile App test

Our Approach

Assessment Evalian

Test Scoping

We'll help you determine the right tests and scope based on your objectives

Step 2 Simple

Proposal & Quote

You'll get a written proposal and quote tailored to your requirements

Policy Creation

Statement of Work

We'll prepare an SoW covering testing deliverables and prerequisites

Endpoint detection response

Testing Work

Your tester will deliver the work, staying in contact with you throughout

Security Service Reporting

Detailed Report

You'll get a detailed report setting out our findings and recommendations

Artboard 5

Post Test Debrief

We'll arrange a call to discuss our report and answer your questions

Comprehensive Cyber Security Service

Remediation Advice

We'll remain available to you to provide remediation advice and guidance

Fast Response

Free Retest

When you've fixed the issues identified in the test, we'll retest them for you

Mobile Application Penetration Testing Methodologies Guidance

Read our blog on Mobile Application Penetration Testing Methodologies Guidance where our head of practice Alex Harper discusses the most common vulnerabilities in mobile applications and why mobile application tests are important.

Testing Methodology

Application Architecture Review

We’ll start with a static analysis of the app and determine frameworks and libraries in use, identify entry points and map execution paths.

Application Testing

Your tester will assess the application in accordance with the Open Web Application Security Project Mobile Testing Guide (OWASP-MTG) methodology, covering the following areas:

  • Local Storage
  • Endpoint Communication
  • Authentication/Authorisation
  • Session Management
  • Interaction with Mobile Platform
  • Code Quality and Exploit Mitigation
  • Cryptography
  • Business Logic
  • Anti-Reversing and Anti-Tampering

Real-Time Penetration Test Reporting & Vulnerability Tracking Tool

SecureIQ is Evalian’s purpose-built penetration testing tool and vulnerability tracking platform, designed to give you full visibility and control across every stage of your security testing as part of your managed penetration testing engagement.

Whether you’re running internal or external infrastructure penetration tests, a web application penetration test, configuration reviews, red teaming or a mobile app pen test, SecureIQ simplifies the process, giving you a complete picture of your organisation’s cyber risk posture.

Built for busy teams, the platform’s dashboard replaces fragmented email chains and static PDFs, so you can focus on reducing risk, not chasing information.

LEARN MORE

SecureIQ Penetration test report tool

Testing Includes

Depending on the agreed pen testing scope, our testing activities will include the following and more:

Data Storage Determination
Key Storage Testing
Shared Storage Testing
API Key Handling Testing
Data in Transit Testing
Encrypted Credential Testing
Default Credential Testing
Lockout Testing
Authentication Bypass Testing
Password Policy Testing
Session Token Storage Testing
Role Definition Testing
User Registration Process Testing
Session Management Testing
Logout Testing
Session Timeout Testing
API Testing
Injection Testing
Cryptography Testing
Validation Testing
Integrity Check Testing
Decompilation Testing
Rooted Device Testing
Injection & Recompilation Testing

When you work with us, you gain access to security consultants who deliver far more than just technical expertise.

Our team helps you identify real-world vulnerabilities and provides clear, practical advice to strengthen your organisation’s security posture — without the hard sell.

You can trust that every assessment is carried out by highly qualified professionals, certified by leading bodies such as CREST, Cyber Scheme, Offensive Security, SANS, ISC2 and IASME.

We make the process straightforward, collaborative and focused on what matters most: protecting your business.

Need some help understanding the information on this form? Visit our guide to scoping a penetration test. 

Ningi Testimonial Pen Testing

Get A Mobile App Test Quote

Don't Just Take Our Word For It

Ningi Testimonial
Beryl Testimonial
Vistry Testimonial
Interscientific David Lawson
BES Testimonial