Verified technical findings
Human-reviewed results tied to observed behavior and the tested environment.
ON-DEMAND SECURITY TESTING
Your next mobile pentest. Run by our experts.
Book a scoped assessment of your Android or iOS app and its API backend. Mobile Hacking Lab runs the engagement using Djini, verifies the findings, and gives your team evidence it can act on.
THE ENGAGEMENT
You define the target. We do the testing.
Bring in specialist mobile security expertise for a release, an assurance milestone, or a specific assessment. Agree the scope and test window with our team, then let us run the work.
- 01
Scope the engagement
Share the apps, backend targets, environment, and timing. We agree what will be tested and the access needed.
- 02
Run the assessment
Our team operates Djini and the testing environment to investigate the agreed mobile and backend attack surface.
- 03
Verify the evidence
Our security experts reproduce findings and assess their impact before delivering them to your team.
- 04
Review and follow through
Walk through the findings, reproduction steps, and remediation guidance. Agree the retest scope and next steps.
On-demand. Priced per test.
Define the scope. See your estimate.
Build a package for your apps and the services behind them. Our team executes the assessment. No annual subscription required.
Mobile app assessment
From €3,000 / app
One Android or iOS app. Black-box static and dynamic testing, with findings verified by our team.
Backend assessment
From €2,000 / backend
The APIs and services behind your app, tested end to end and reviewed by our security experts.
Starting prices, excluding VAT. Final pricing depends on scope and complexity. The volume discount applies to the combined number of app and backend tests: 10% from 10 tests and 20% from 20 tests. For larger programmes, discuss the scope with our team.
Let's schedule your assessment
Your scope. Our team on the call.
Choose a time to discuss your apps, backend, and preferred test window. We confirm the final scope, quote, and assessment date with you. Scheduling is handled by Calendly; this books a scoping call, and your pentest date is agreed with the team.
Delivered by Mobile Hacking Lab
A report your team can put to work.
Reproduction and impact
The steps and evidence needed to understand the issue and its practical risk.
Remediation guidance
Concrete recommendations for the engineers resolving the findings.
A team to discuss the results
Review the outcome with the people who executed and verified the assessment.
A few good questions
Before you go deeper.
Do we need an annual Djini subscription?
No. This is a managed engagement that can be booked without an annual platform subscription. Scope, timing, and pricing are agreed for the assessment.
Who runs the pentest?
Mobile Hacking Lab executes the engagement. Our team operates Djini, investigates the results, verifies findings, and delivers the reporting and review.
Do we need to provide source code?
Black-box testing is available without source code. The team confirms app builds, accounts, targets, and any other access needed during scoping.
Can the API backend be included?
Yes. Include your mobile app’s backend in the scope discussion. The final engagement defines the app and API coverage and the retest arrangements.
LET’S DEFINE THE WORK
Your next release. Our team on the test.
Estimate your package and schedule a scoping call with our team on this page. No annual subscription required.