Quixxi
Quixxi is a Sydney-based mobile application security platform offering SAST/DAST scanning, RASP, continuous threat monitoring, and AI governance for enterprise and government customers across fintech, government, healthcare, gaming, and e-commerce globally.
- Company typePrivate
- Founded2013
- HeadquartersNorth Sydney, Australia
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What Quixxi does
Quixxi is a Sydney-headquartered mobile application security platform founded in 2013, serving enterprise and government customers across fintech, government, healthcare, gaming, and e-commerce in markets including the US, EU, Middle East, Australia, and South America. The company's product suite is organized around three pillars — Quixxi Scan (SAST and DAST vulnerability assessment), Quixxi App Shield (Runtime Application Self-Protection using patented proprietary technology), and Quixxi App Supervise (remote app management and continuous live threat monitoring) — delivered through a unified intelligent dashboard with code-less, automated integration across Android, iOS, Flutter, Xamarin, Cordova, Ionic, and React Native. The platform also offers API Scan and, as of April 2026, Quixxi Clarity AI for AI model governance, lifecycle management, and regulatory compliance.
Quixxi operates a SaaS subscription model with a freemium tier (free vulnerability scanning) feeding a self-serve product-led growth funnel, complemented by direct enterprise sales (a "Book a demo" CTA) and a partner/reseller channel targeting larger organizations. The company is SOC 2 Type II and CMMI certified and holds patents covering its mobile app security technology. Its customer base spans government (NSW Government, Branco Nacional, SEMAR), financial services (Allstate, BPCE, Stanbic, Bitso), healthcare (AUGMedix), technology (Siemens, Dialog), and consumer/retail (Nestle, brMalls, Bemol), with 51-100 employees.
On April 13, 2026, ASX-listed US cybersecurity operator WhiteHawk agreed to acquire Quixxi for up to 500 million shares over three years, subject to performance conditions. The deal structure — earnout-heavy with most Quixxi staff not transitioning — indicates the acquirer is purchasing specific assets and capabilities (notably AI governance) rather than the standalone business, creating a meaningful continuity and execution risk for the franchise as currently constituted.
Quixxi firmographics
Firmographics- Name
- Quixxi
- Legal name
- Quixxi
- Website
- https://quixxisecurity.com
- Company type
- Private
- Founded year
- 2013
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Quixxi is a Sydney-based mobile application security platform offering SAST/DAST scanning, RASP, continuous threat monitoring, and AI governance for enterprise and government customers across fintech, government, healthcare, gaming, and e-commerce globally.
- Ownership category
- akta.pro rank
Quixxi industry classification
Industry- Product category
- Mobile Application Security
- NAICS
- Security Systems Services (except Locksmiths) (561621), Custom Computer Programming Services (541511)
- SIC
- Services-Computer Programming Services (7371)
- akta.pro primary industry
- Mobile Application Security (App Shielding, Anti-Tamper) (HDADACAL)
- akta.pro secondary industries
- Application Security Testing (SAST/DAST/IAST/SCA) (HDADACAC), Web Application Security (WAF, RASP) (HDADACAA)
Keywords
Where Quixxi is headquartered
LocationHeadquarters
- HQ city
- North Sydney
- HQ country
- Australia
- HQ region
- Oceania
Offices1 record
Markets served
Quixxi business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations
Revenue model
- SaaS Subscription: Subscription-based pricing model for mobile app security services including SAST, DAST, Shield, and Supervise modules.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Pay-as-you-go | Free trial available for vulnerability scanning |
| Subscription | Annual | Enterprise tier with full suite of security tools |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels5 records
Quixxi product offering
Product offeringCore offering
Quixxi provides an integrated mobile application security and management platform that combines Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), API scanning, patented Runtime Application Self-Protection (RASP) via Quixxi App Shield, and continuous runtime threat monitoring via Quixxi App Supervise. It also offers Quixxi Clarity AI for AI model governance, lifecycle management, and regulatory compliance, delivered as a codeless, automated suite with a unified intelligent dashboard supporting Android, iOS, Flutter, Xamarin, Cordova, Ionic, and React Native.
Product overview
Quixxi is a comprehensive mobile app security and management platform offering a unified suite of tools built around three core pillars: Scan (SAST and DAST vulnerability assessments), Shield (Runtime Application Self-Protection with patented technology), and Supervise (remote app management and continuous threat monitoring). The platform also includes API Scan for API security and Quixxi Clarity AI for AI model governance and regulatory compliance. The products share a unified intelligent dashboard and are designed for code-less, automated integration that accommodates multiple mobile development platforms including Android, iOS, Flutter, Xamarin, Cordova, Ionic, and React Native.
Differentiator
Problem solved
Functional benefit
Brands
- Quixxi Scan: Advanced SAST and DAST vulnerability assessment tool providing thorough analysis of app security posture with actionable recommendations to mitigate potential risks.
- Quixxi App Shield
- Quixxi App Supervise
- Quixxi Clarity AI
Products and services
- Quixxi Scan (SAST) Static Application Security Testing vulnerability assessment tool that analyzes mobile application source code and binary to identify security weaknesses and provides actionable remediation recommendations. Designed for enterprise mobile app developers and security teams that need pre-release code risk visibility.
- Quixxi Scan (DAST) Dynamic Application Security Testing tool that assesses mobile application security posture at runtime to detect vulnerabilities and configuration issues, with actionable recommendations to mitigate risk. Used by enterprise and developer teams for runtime security validation.
- API Scan Security scanning service for API endpoints that identifies vulnerabilities and supports API security compliance. Targeted at enterprise development teams responsible for mobile back-end and API security.
- Quixxi App Shield Runtime Application Self-Protection (RASP) solution built on Quixxi's patented and proprietary technology that protects mobile applications and intellectual property from malicious attacks at runtime. Designed for enterprises that need to safeguard source code, business logic, and revenue from tampering and reverse engineering.
- Quixxi App Supervise Remote application management and threat modeling tool that delivers advanced analytics, app diagnostics, and continuous live threat monitoring through a unified intelligent dashboard. Used by enterprise security and risk teams to maintain ongoing visibility into mobile app threats.
- Quixxi Clarity AI AI model governance, lifecycle management, and regulatory compliance platform for enterprise environments. Targets enterprises deploying AI systems that need governance, compliance, and lifecycle oversight of AI models.
Quantifiable outcome
- Apps scanned and protected within minutes
Companies that use Quixxi
Customer profileNamed customers12 records
Segments6 records
Ideal customer profiles5 records
Quixxi technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability5 records
Feature4 records
Quixxi partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- WhiteHawkcoreWhiteHawk (ASX-listed US cybersecurity exchange operator) has agreed to acquire Quixxi for up to 500 million shares over three years, subject to performance conditions. Quixxi's Clarity AI platform provides AI model governance, lifecycle management, and regulatory compliance capabilities for enterprise environments. Most Quixxi staff will not transition to WhiteHawk, with only a couple of key personnel expected to onboard.
Scale indicators2 records
Recent moves7 records
Expansion highlights5 records
Quixxi competitors and assessment
Company assessmentBroad incumbents
- Checkmarx: Checkmarx is a broad incumbent in application security testing with SAST, DAST, and SCA capabilities. It overlaps with Quixxi Scan at the enterprise buyer level and represents a larger, well-funded alternative in mobile and web app security assessments.
- Veracode: Veracode is a broad incumbent in application security testing (SAST, DAST, SCA) serving large enterprises. While not mobile-first, it overlaps with Quixxi Scan in enterprise security testing budgets and competes for the same application security buyer.
- Synopsys: Synopsys offers a broad application security and software composition analysis portfolio including Coverity and Black Duck. It competes with Quixxi in enterprise SAST and DAST engagements, particularly for large regulated customers.
Direct peers
- DataTheorem: DataTheorem focuses on mobile and API application security through continuous SAST/DAST and runtime analysis. It overlaps with Quixxi Scan and App Supervise, particularly for customers prioritizing API and mobile threat detection.
- NowSecure: NowSecure provides mobile application security testing, including SAST and DAST, plus continuous monitoring, directly overlapping with Quixxi Scan. Both vendors target enterprise mobile development and security teams with automated vulnerability assessment workflows.
- Guardsquare: Guardsquare is a direct competitor in mobile application shielding and RASP via its DexGuard and iXGuard products. Both companies sell code obfuscation and runtime protection to enterprise and financial services mobile app developers, with similar pricing and buyer profiles.
- Approov: Approov (by CriticalBlue) delivers runtime application self-protection and API attestation for mobile apps, directly overlapping with Quixxi App Shield and API Scan. Both serve fintech and mobile-first enterprises needing tamper-proof client integrity.
- Promon: Promon offers Promon SHIELD, a mobile app shielding and anti-tamper product that competes head-to-head with Quixxi App Shield. Both target banking, fintech, and enterprise customers that need patented runtime protection and IP theft prevention.
- Zimperium: Zimperium is a mobile threat defense and mobile application security vendor whose products address runtime protection, malware detection, and vulnerability assessment on iOS and Android, partially overlapping with Quixxi's mobile security portfolio.
- Appdome: Appdome provides a mobile app security and RASP platform covering anti-fraud, anti-malware, and code obfuscation. Like Quixxi, it offers a no-code integration model and serves large financial and enterprise customers.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks5 records
Key highlights7 records
Customer concentration
Quixxi social profiles
Digital presenceQuixxi compliance and trust
Trust signalCompliance3 records
Quixxi financial estimates
Financial estimateRevenue estimate
Valuation estimate
Quixxi leadership team
Management profileNumber of profiles
Profiles14 records
Quixxi funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Quixxi M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Quixxi
What does Quixxi do?
Quixxi provides an integrated mobile application security and management platform that combines Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), API scanning, patented Runtime Application Self-Protection (RASP) via Quixxi App Shield, and continuous runtime threat monitoring via Quixxi App Supervise. It also offers Quixxi Clarity AI for AI model governance, lifecycle management, and regulatory compliance, delivered as a codeless, automated suite with a unified intelligent dashboard supporting Android, iOS, Flutter, Xamarin, Cordova, Ionic, and React Native.
Is Quixxi a public or private company?
Quixxi is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Quixxi founded?
Quixxi was founded in 2013. It employs 51 to 100 people.
Where is Quixxi based?
Quixxi is headquartered in North Sydney, Australia, in the Oceania region.
How does Quixxi make money?
One revenue line is on record: saaS Subscription.
Who are Quixxi's main competitors?
Broad incumbents on record are Checkmarx, Veracode and Synopsys. Direct peers are DataTheorem, NowSecure, Guardsquare, Approov, Promon, Zimperium and Appdome.
Does Quixxi have an API?
Yes. Quixxi offers API Scan as a product feature for API security scanning. The scope and technical details (type, auth method, rate limits, sandbox availability) of any public API are not specified in the available content.
What industry is Quixxi in?
Quixxi's product category is Mobile Application Security. Its primary akta.pro industry code is HDADACAL, Mobile Application Security (App Shielding, Anti-Tamper), with a secondary code of HDADACAC, Application Security Testing (SAST/DAST/IAST/SCA). Its NAICS code is 561621 and its SIC code is 7371.