Q-MAST by Quokka is an automated Mobile Application Security Testing (MAST) solution for Android and iOS applications that enhances traditional Software Composition Analysis (SCA) by performing static (SAST), dynamic (DAST), interactive (IAST) and forced-path execution analysis. The solution analyzes compiled app binaries without requiring source code access, even for the latest OS versions, and operates regardless of in-app or run-time obfuscations. It analyzes library operations in context to identify potential encryption or privacy issues, while ensuring apps meet security protocols including encryption standards and information sharing locations. Q-MAST integrates with CI/CD and DevSecOps tools to provide security testing during the software development lifecycle.
