NowSecure
NowSecure provides automated mobile application security testing software integrating SAST, DAST, IAST, and API testing into CI/CD pipelines. It serves financial services, government, healthcare, and telecom enterprises with continuous vulnerability assessment, AI risk detection, and penetration testing services.
- Company typePrivate
- Founded2011
- HeadquartersChicago, United States
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What NowSecure does
NowSecure is a Chicago-based mobile application security company founded in 2011 that delivers an integrated testing platform combining SAST, DAST, IAST, and API security analysis with AI-powered authenticated testing and third-party app risk intelligence. The core NowSecure Platform performs 600+ standards-based security, privacy, and compliance checks per app (OWASP MASVS, NIST, FISMA, GDPR, HIPAA, CCPA, PCI DSS) and reports a sub-1% false positive rate across more than 4 million cumulative automated assessments. The platform is augmented by AI-Navigator for authenticated workflow testing, MARI for vetting third-party apps at scale (up to 300,000 apps), Guided Testing services with human analysts, PTaaS, and ADA MASA certification for Google Play Data Safety. NowSecure also maintains the open-source Frida and Radare tooling, supports CI/CD integrations (GitHub Actions, Azure DevOps, Jenkins, CircleCI, GitLab, Bitrise), and provides the free NowSecure Academy training platform.
The company generates revenue through annual SaaS subscriptions to the NowSecure Platform, subscription-based PTaaS engagements, one-time sales of the NowSecure Workstation hardware/software kit, premium guided testing services, and ADA MASA validation fees. Go-to-market combines enterprise field sales targeting CISOs and compliance officers in regulated industries, product-led growth via free mobile app assessments and the MARC public risk checker, channel partnerships through CI/CD marketplaces, and API-first integrations into MDM/EMM, GRC, ITSM, and ticketing platforms. Customer base spans financial services, federal and state government, healthcare, telecommunications, entertainment, and retail, with named logos including T-Mobile, Warner Bros. Discovery, the U.S. Department of Justice, U.S. Marshals Service, Bell Canada, and Genisys Credit Union.
NowSecure firmographics
Firmographics- Name
- NowSecure
- Legal name
- NowSecure, Inc.
- Website
- https://nowsecure.com
- Company type
- Private
- Founded year
- 2011
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- NowSecure provides automated mobile application security testing software integrating SAST, DAST, IAST, and API testing into CI/CD pipelines. It serves financial services, government, healthcare, and telecom enterprises with continuous vulnerability assessment, AI risk detection, and penetration testing services.
- Ownership category
- akta.pro rank
NowSecure industry classification
Industry- Product category
- Mobile Application Security Testing (MAST)
- NAICS
- Testing Laboratories and Services (541380), Testing Laboratories and Services (54138), Computer Systems Design and Related Services (54151)
- SIC
- Services-Testing Laboratories (8734), Services-Computer Programming Services (7371)
- akta.pro primary industry
- Application Security Testing (SAST/DAST/IAST/SCA) (HDADACAC)
- akta.pro secondary industries
- Penetration Testing Platforms (PTaaS) (HDADAHAG), Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG), Application Security & DevSecOps Services (BPAKAHAJ)
Keywords
Where NowSecure is headquartered
LocationHeadquarters
- HQ city
- Chicago
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
NowSecure business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Supply Chain
Revenue model
- NowSecure Platform SaaS Subscription: Annual subscription for continuous automated mobile app security testing through the cloud-based platform. Includes baseline, advanced, and guided testing tiers with compliance and policy features.
- Pentesting as a Service (PTaaS): Subscription-based expert-led penetration testing services combined with automated testing. Includes rapid retesting, consultation, and attestation letters for compliance.
- NowSecure Workstation: One-time purchase of purpose-built hardware and software kit for mobile app security testing. Includes ongoing software updates and support.
- Guided Testing Services: Combines platform automation with NowSecure analyst expertise for deep analysis. Premium service tier with human-guided testing for complex scenarios.
- ADA MASA Validation: Independent security review certification for Google Play Data Safety section compliance. Includes automated testing, smoke test, and formal attestation.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | One time | Free Mobile App Assessment |
| Subscription | Annual | NowSecure Platform Subscription |
| Subscription | Annual | PTaaS Subscription |
| One time/ perpetual license | One time | NowSecure Workstation |
Go-to-market motion4 records
Distribution channels7 records
Marketing channels9 records
NowSecure product offering
Product offeringCore offering
NowSecure provides an automated mobile application security testing platform (NowSecure Platform) that performs continuous SAST, DAST, IAST, and API security testing with CI/CD integration and policy-driven compliance reporting for enterprises and government agencies. The company also delivers subscription-based PTaaS penetration testing services, a purpose-built Workstation hardware/software kit, third-party mobile app risk intelligence (MARI), AI-Navigator for authenticated testing, ADA MASA certification, and open-source instrumentation tools Frida and Radare.
Product overview
NowSecure is a mobile application security company offering a unified platform-plus-modules architecture. The core NowSecure Platform provides continuous, automated mobile appsec testing with SAST, DAST, IAST, and API security analysis. Additional modules include AI Navigator (AI-powered authenticated testing), Mobile App Risk Intelligence/MARI (third-party app risk vetting), Guided Testing (automation plus expert analyst), and Platform GitHub Actions (CI/CD integration). The company also offers PTaaS penetration testing services, ADA MASA certification services, Workstation (on-prem testing toolkit), Academy (free training), and maintains open-source tools Frida and Radare. The platform integrates with major CI/CD tools (GitHub, Jenkins, CircleCI, GitLab, Azure DevOps), issue trackers (Jira, Azure Boards), vulnerability management systems (Black Duck CodeDX, Threadfix, Brinqa), and communication tools (Slack, email).
Differentiator
Problem solved
Functional benefit
Brands
- NowSecure Platform: Continuous, automated, integrated mobile app security testing platform
- NowSecure AI Navigator
- NowSecure Mobile App Risk Intelligence (MARI)
- NowSecure Workstation
- NowSecure PTaaS
- NowSecure Academy
- Frida
- Radare
- NowSecure MARM
- AI Discovery & Governance
Products and services
- NowSecure Platform All-in-one continuous automated mobile appsec platform that delivers automated static, dynamic, interactive, and API security analysis with policy-driven compliance and CI/CD integrations for organizations that build and use mobile apps.
- NowSecure Workstation Preconfigured hardware and software kit that compresses mobile app vulnerability assessments to hours with wizard-driven testing, bundled proprietary and open-source tools (including Frida and Radare), and pre-formatted customizable reporting.
- NowSecure PTaaS Penetration Testing as a Service combining automated platform capabilities with world-class human-led mobile app penetration testing, including rapid retesting, consultation, and compliance attestation letters for ISO 17025-accredited engagements.
- NowSecure ADA MASA Validation Android Independent Security Review service for Google Play Data Safety section compliance delivered through NowSecure's exclusive mobile-first, mobile-only ADA Authorized Lab status, including automated testing, smoke testing, and formal attestation.
- NowSecure AI-Navigator AI-powered authenticated dynamic testing product that automates login and navigates authenticated mobile app workflows to test behind authentication, reducing authenticated setup and testing time by 90%+ and increasing attack surface coverage by 95% over non-authenticated testing.
- NowSecure Mobile App Risk Intelligence (MARI) Evidence-based risk decision engine for vetting third-party mobile apps at enterprise scale that detects hidden AI/LLM components, maps data flows by country, inventories SDKs, and provides risk scores for up to 300,000 apps.
- AI Governance for Mobile AppSec Mobile AppSec product that discovers shadow AI hidden in the mobile app supply chain, identifies AI local files, endpoint URLs, libraries, and exposed API keys, and tests runtime data behavior to help organizations establish AI usage guardrails and governance.
- Frida Free open-source dynamic instrumentation toolkit for developers, reverse engineers, and security researchers that enables injection of JavaScript into native apps on Windows, macOS, Linux, iOS, Android, FreeBSD, and QNX.
- Radare Free open-source portable reverse engineering toolkit for disassembling, analyzing, emulating, and debugging applications across platforms.
- NowSecure Platform Guided Testing Service tier of the NowSecure Platform that combines platform automation with NowSecure mobile security analyst expertise to navigate complex workflows such as MFA, CAPTCHA, QR codes, and shopping carts for deep manual testing coverage.
Quantifiable outcome
- 90%+ reduction in authenticated mobile testing time
- +7 more outcomes
Companies that use NowSecure
Customer profileNamed customers16 records
Segments7 records
Ideal customer profiles4 records
NowSecure technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration18 records
AI capability7 records
Feature8 records
NowSecure partnerships and signals
Strategic signalPartnerships
Eight partnerships are on record, tiered core, major and minor.
- Agentic AI Data Partner ProgramcoreLaunched Agentic AI Data Partner Program making mobile application risk intelligence available to security vendors and AI-driven platforms. Partners include unnamed market leaders in enterprise cyber risk rating, third-party risk management, mobile EDR, unified endpoint management, and mobile device management. Data derived from more than four million real-world mobile application security assessments.
- iVerifycoreStrategic partnership to integrate NowSecure's Mobile App Risk Intelligence (MARI) data into the iVerify Enterprise admin portal. Enables security teams to automatically assess and monitor mobile app risk across enterprise device fleets. Combines NowSecure's ML/AI-powered automated app security testing with iVerify's mobile endpoint detection and response platform.
- GitHubcoreStrategic partnership enabling NowSecure mobile app security testing integration through GitHub Actions. Provides automated dynamic mobile app security testing integrated into GitHub Advanced Security's code scanning interface. First automated mobile app security testing on GitHub Marketplace.
- App Defense Alliance (ADA)corePartnership with App Defense Alliance (Joint Development Foundation with Google, Meta, and Microsoft under Linux Foundation) to build and validate Mobile Application Security Assessment (MASA). NowSecure is the only mobile-first, mobile-only ADA Authorized Lab able to perform ADA MASA validation for Google Play Data Safety section.
- OWASP FoundationcoreActive contributor and supporter of OWASP Mobile Project, OWASP MASVS, and OWASP MSTG. NowSecure researchers contribute to standards development and the company is an OWASP God Mode sponsor.
- Microsoft Azure DevOpsmajorNowSecure mobile app security testing available through Azure DevOps Marketplace, enabling automated security testing integrated into Azure DevOps pipelines.
- HumanaminorHealthcare partner customer utilizing NowSecure for mobile app security testing.
- Jenkins, CircleCI, GitLab, BitrisemajorPre-built integrations with major CI/CD platforms including Jenkins, CircleCI, GitLab, and Bitrise for automated mobile app security testing in development pipelines.
Scale indicators15 records
Recent moves6 records
Expansion highlights6 records
NowSecure competitors and assessment
Company assessmentBroad incumbents
- Veracode: Thoma Bravo-owned, broad application security platform covering SAST, DAST, and mobile testing. Competes with NowSecure in mobile AppSec but operates across a much larger portfolio including web and software composition analysis.
- Checkmarx: Application security testing platform serving enterprises with SAST, SCA, and IaC scanning. Provides mobile application security testing as part of its broader AppSec suite, competing for similar CISO and AppSec leader budgets.
- Snyk: Developer security platform spanning SAST, SCA, container, and IaC security. Increasingly active in mobile security testing through Snyk Code and ecosystem partnerships, competing for developer-driven AppSec budgets.
- Synopsys Software Integrity Group (Black Duck): Software composition analysis and application security testing giant (now part of Black Duck). Offers mobile application security testing alongside broader AppSec, technology partner with NowSecure but also a competitor in adjacent tools.
Direct peers
- Data Theorem: Mobile and API application security vendor offering automated AppSec testing, runtime protection, and software supply chain analysis. Closest direct competitor to NowSecure in mobile-first AppSec.
- Guardsquare: Mobile application protection and security testing vendor (DexGuard, iXGuard, AppSweep). Overlaps with NowSecure in mobile code analysis and reverse engineering tooling, with complementary runtime protection focus.
- Cobalt: PTaaS (Penetration Testing as a Service) platform with growing mobile testing capabilities. Competes with NowSecure PTaaS for enterprise pentest budgets, particularly where buyers want a unified PTaaS provider across web, mobile, and cloud.
Emerging players
- Appknox: Mobile application security testing vendor offering automated SAST/DAST for iOS and Android. Direct mobile-first competitor to NowSecure, focused on SMB and mid-market with growing enterprise presence.
- Approov (by CriticalBlue): Mobile API security and runtime app protection vendor. Overlaps with NowSecure in mobile API security testing and complements NowSecure's API testing capabilities with runtime attestation.
- Build38: Mobile application security specialist offering in-app protection, threat detection, and security testing. Competes with NowSecure in mobile app risk management for enterprises and government clients.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
NowSecure social profiles
Digital presenceNowSecure compliance and trust
Trust signalCompliance10 records
NowSecure financial estimates
Financial estimateRevenue estimate
Valuation estimate
NowSecure leadership team
Management profileNumber of profiles
Profiles9 records
NowSecure funding detail
Funding detailFunding overview
Funding rounds4 records
Investors5 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
NowSecure M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about NowSecure
What does NowSecure do?
NowSecure provides an automated mobile application security testing platform (NowSecure Platform) that performs continuous SAST, DAST, IAST, and API security testing with CI/CD integration and policy-driven compliance reporting for enterprises and government agencies. The company also delivers subscription-based PTaaS penetration testing services, a purpose-built Workstation hardware/software kit, third-party mobile app risk intelligence (MARI), AI-Navigator for authenticated testing, ADA MASA certification, and open-source instrumentation tools Frida and Radare.
Is NowSecure a public or private company?
NowSecure is a private company. It is classified as venture growth investor backed and is currently operating.
When was NowSecure founded?
NowSecure was founded in 2011. It employs 51 to 100 people.
Where is NowSecure based?
NowSecure is headquartered in Chicago, United States, in the North America region.
How does NowSecure make money?
Five revenue lines are on record. NowSecure Platform SaaS Subscription is the primary driver. The others are pentesting as a Service (PTaaS), nowSecure Workstation, guided Testing Services and ADA MASA Validation.
Who are NowSecure's main competitors?
Broad incumbents on record are Veracode, Checkmarx, Snyk and Synopsys Software Integrity Group (Black Duck). Direct peers are Data Theorem, Guardsquare and Cobalt. Emerging players are Appknox, Approov (by CriticalBlue) and Build38.
Does NowSecure have an API?
Yes. NowSecure Platform provides API access to detailed findings, evidence sets, permissions, tracking domains, and risk breakdowns for integration into internal systems and governance workflows. The platform also offers open APIs and native CLI for custom integrations and interactions into development workflows. Developer documentation is at app.nowsecure.com.
What industry is NowSecure in?
NowSecure's product category is Mobile Application Security Testing (MAST). Its primary akta.pro industry code is HDADACAC, Application Security Testing (SAST/DAST/IAST/SCA), with a secondary code of HDADAHAG, Penetration Testing Platforms (PTaaS). Its NAICS code is 541380 and its SIC code is 8734.