Kryptowire
- Company typePrivate
- Founded2011
- HeadquartersMclean, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Kryptowire does
Kryptowire, operating commercially as Quokka since a September 2022 rebrand, is a mobile application security and vulnerability management vendor headquartered in McLean, Virginia. The company sells a three-product portfolio — Q-mast for source-code-free mobile application security testing, Q-scout for agentless fleet-wide mobile app vetting via MDM/UEM integration, and Q-firm for Android device firmware security analysis — built on proprietary AI-augmented engines that combine static (SAST), dynamic (DAST), and forced-path execution techniques to inspect compiled iOS and Android binaries, generate version-specific software bills of materials, and detect malicious behaviors, supply chain risks, and compliance gaps.
The platform targets enterprise security teams and government agencies in regulated verticals — federal and state/local government, financial services, healthcare, mCommerce, and telecommunications — with named customers including the Department of Homeland Security, Orange, Trane Technologies, and UC Berkeley. Go-to-market combines direct enterprise field sales with a global reseller and distributor network, DevOps pipeline integrations (GitHub, GitLab, Jenkins, Azure DevOps, Snyk, Appium), partner-ready APIs for embedding the mobile app risk intelligence feed into third-party products, and thought leadership through original research (the 'State of Mobile App Security' report, CVE disclosures, and academic publications).
Quokka is a privately held, venture-backed company that closed a growth equity round in February 2022 led by U.S. Venture Partners with participation from Crosslink Capital. The company reports 11–50 employees and operational scale metrics of 10M+ devices protected, 2M+ apps scanned, 115k+ vulnerabilities identified, and 230+ mobile CVEs disclosed by its research team.
Kryptowire firmographics
Firmographics- Name
- Kryptowire
- Legal name
- Kryptowire, Inc.
- Website
- https://kryptowire.com
- Company type
- Private
- Founded year
- 2011
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Ownership category
- akta.pro rank
Kryptowire industry classification
Industry- Product category
- Mobile Application Security
- NAICS
- Software Publishers (5132), Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- App Security, Compliance & Review Automation Platforms (BPAMADAJ)
- akta.pro secondary industry
- Testing, QA & Release/Deployment Enablement (BPAEAAAN)
Keywords
Where Kryptowire is headquartered
LocationHeadquarters
- HQ city
- Mclean
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Kryptowire business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Operations, Marketing or Sales
Revenue model
- Software/SaaS Subscriptions: Subscription-based pricing model for access to mobile app security products (Q-scout, Q-mast, Q-firm) with tiered plans based on usage and features. Enterprise agreements with annual billing implied by 'Request Demo' enterprise sales motion.
Go-to-market motion3 records
Distribution channels4 records
Marketing channels6 records
Kryptowire product offering
Product offeringCore offering
Kryptowire (now operating as Quokka) provides automated mobile application and device firmware security analysis through its Q-Suite of products (Q-mast, Q-scout, Q-firm). The platform performs static, dynamic, and forced-path execution analysis on iOS and Android apps without requiring source code, generates Software Bills of Materials (SBOMs), and detects malware, vulnerabilities, and supply chain risks for government and enterprise customers.
Product overview
Quokka (formerly Kryptowire) offers a unified platform portfolio of three complementary mobile security products. Q-scout provides proactive mobile app vetting for apps employees use, integrating with MDMs/UEMs for real-time visibility into installed apps. Q-mast delivers full-spectrum mobile application security testing for apps developers build, supporting CI/CD integration with GitHub, GitLab, Jenkins, Azure DevOps, and Snyk without requiring source code. Q-firm extends the platform to firmware security analysis for Android devices. The three products work together to provide comprehensive mobile app risk intelligence across the development pipeline, employee device fleets, and device firmware.
Differentiator
Problem solved
Functional benefit
Brands
- Q-mast: Full-spectrum mobile application security testing for iOS and Android apps without requiring source code. Generates complete version-specific software bill of materials (SBOM), including embedded libraries, to surface vulnerable components and dependencies.
- Q-scout
- Q-firm
Products and services
- Q-mast Mobile application security testing product that performs static, dynamic, and forced-path execution analysis on iOS and Android apps to detect malware, vulnerabilities, and supply chain risks without requiring source code access.
- Q-scout Mobile app vetting product designed for assessing and verifying the security posture of mobile applications for government and enterprise use cases.
- Q-firm Firmware security analysis product that performs security evaluation of device firmware to identify vulnerabilities and supply chain risks.
Quantifiable outcome
- No source code required for full-spectrum mobile app testing
- +2 more outcomes
Companies that use Kryptowire
Customer profileNamed customers4 records
Segments8 records
Ideal customer profiles3 records
Kryptowire technology and API
TechnologyAPI detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration7 records
AI capability2 records
Feature6 records
Kryptowire partnerships and signals
Strategic signalPartnerships
Seven partnerships are on record, tiered core and supporting.
- MDM/UEM VendorscoreTechnology integrations with Mobile Device Management and Unified Endpoint Management vendors enabling Q-scout deployment agentlessly across enterprise device fleets.
- GitHubcoreDevOps tool integration for Q-mast enabling automated security testing within GitHub-based development workflows and CI/CD pipelines.
- GitLabcoreDevOps tool integration for Q-mast enabling automated security testing within GitLab-based development workflows and CI/CD pipelines.
- JenkinscoreDevOps tool integration for Q-mast enabling automated security testing within Jenkins-based CI/CD pipelines.
- Azure DevOpscoreDevOps tool integration for Q-mast enabling automated security testing within Azure DevOps environments.
- SnyksupportingSecurity integration partnership enabling complementary vulnerability detection and remediation workflows.
- AppiumsupportingMobile testing framework integration for coordinated mobile app testing and security analysis.
Scale indicators7 records
Recent moves6 records
Expansion highlights6 records
Kryptowire competitors and assessment
Company assessmentDirect peers
- Zimperium: Zimperium specializes in mobile threat defense (MTD) and runtime mobile app risk analysis for enterprises and governments, particularly Android. Its zScan and zApps products directly overlap with Q-scout's device-fleet mobile app vetting use case.
- Lookout: Lookout offers a mobile security platform spanning app analysis, mobile threat defense, and data protection for enterprise iOS and Android fleets. Its mobile app reputation and risk-scoring capabilities put it in direct competition with Q-scout at the device-fleet layer.
- NowSecure: NowSecure provides mobile application security testing and runtime analysis for iOS and Android, including binary/closed-source assessment and DevSecOps pipeline integrations. It directly overlaps Quokka's Q-mast and Q-scout product lines and serves similarly regulated enterprise and government buyers.
- DataTheorem: DataTheorem focuses on mobile and API/application security, including AppSec-as-a-Service offerings with continuous runtime analysis for iOS and Android apps. It overlaps with Quokka's mobile app testing and supply chain analysis positions.
- Pradeo: Pradeo delivers mobile application security testing, runtime threat detection, and supply chain risk assessment for Android and iOS. Its mobile app vetting capabilities and government/enterprise focus are directly comparable to Quokka's Q-scout offering.
- Guardsquare: Guardsquare provides mobile app protection, including DexGuard/iXGuard for code obfuscation and runtime application self-protection (RASP), with threat monitoring for mobile apps. It is a relevant adjacent peer for the runtime mobile app risk and supply-chain risks Quokka addresses.
Broad incumbents
- Veracode: Veracode is a broad application security testing platform (SAST, DAST, SCA) with mobile AST capabilities and a large enterprise/government installed base. It competes with Quokka at the application security layer and can subsume mobile AST into a wider AST procurement decision.
- Checkmarx (Checkmarx One): Checkmarx provides SAST, SCA, and API security with mobile (CxSAST, CxCodebashing) and API testing modules, and ships CI/CD integrations overlapping with Q-mast. It competes for the same DevSecOps buyer and can be bundled into wider application security rollouts.
- Synopsys (Black Duck / Polaris): Synopsys offers a portfolio of application security and software composition analysis tools (including Coverity, Black Duck, Polaris) that increasingly extend into mobile and SBOM use cases. As a large incumbent, it competes with Quokka for enterprise AST budget while offering broader platform consolidation to buyers.
Emerging players
- Snyk: Snyk is a developer security platform extending into mobile (Snyk Code, Snyk Open Source) with CI/CD integrations including GitHub, GitLab, and Jenkins - the same DevOps pipelines Q-mast targets. As Quokka lists Snyk as an integration partner, Snyk competes for the DevSecOps budget adjacent to Quokka.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Kryptowire social profiles
Digital presenceKryptowire financial estimates
Financial estimateRevenue estimate
Valuation estimate
Kryptowire leadership team
Management profileNumber of profiles
Profiles2 records
Kryptowire funding detail
Funding detailFunding overview
Funding rounds1 record
Investors2 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Kryptowire M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Kryptowire
What does Kryptowire do?
Kryptowire (now operating as Quokka) provides automated mobile application and device firmware security analysis through its Q-Suite of products (Q-mast, Q-scout, Q-firm). The platform performs static, dynamic, and forced-path execution analysis on iOS and Android apps without requiring source code, generates Software Bills of Materials (SBOMs), and detects malware, vulnerabilities, and supply chain risks for government and enterprise customers.
Is Kryptowire a public or private company?
Kryptowire is a private company. It is classified as venture growth investor backed and is currently operating.
When was Kryptowire founded?
Kryptowire was founded in 2011. It employs 11 to 50 people.
Where is Kryptowire based?
Kryptowire is headquartered in Mclean, United States, in the North America region.
How does Kryptowire make money?
One revenue line is on record: software/SaaS Subscriptions.
Who are Kryptowire's main competitors?
Direct peers on record are Zimperium, Lookout, NowSecure, DataTheorem, Pradeo and Guardsquare. Broad incumbents are Veracode, Checkmarx (Checkmarx One) and Synopsys (Black Duck / Polaris). Snyk is listed as an emerging player.
Does Kryptowire have an API?
No public API is recorded for Kryptowire.
What industry is Kryptowire in?
Kryptowire's product category is Mobile Application Security. Its primary akta.pro industry code is BPAMADAJ, App Security, Compliance & Review Automation Platforms, with a secondary code of BPAEAAAN, Testing, QA & Release/Deployment Enablement. Its NAICS code is 5132 and its SIC code is 7372.