Quokka

We were founded in 2011 as Kryptowire, now Quokka, to provide mobile app risk intelligence through vetting and security testing. We use AI-powered engines to analyze what mobile apps are truly doing, going beyond surface scans and static code analysis. This gives our clients better visibility and control over mobile app threats.

Our core products are Q Scout, which continuously vets mobile apps to identify risky applications within a mobile fleet, and Q Mast, which provides automated mobile app security testing to uncover vulnerabilities before deployment. We also offer Partner-Ready APIs for our intelligence feed, which clients use to improve their existing security solutions, automate enforcement, and speed up remediation.

We help CISOs enhance their security stacks, IT teams control mobile app risks in real-time, and app owners find and fix security and privacy issues in applications they build or use. Our clients include Fortune 500 companies and governments worldwide, including the US Federal Government, which we have served since 2011.

Our intelligence capabilities include behavioral analysis of apps, data destinations, and system configurations. We have protected over 10 million devices, found more than 115,000 vulnerabilities, and scanned over 2 million applications. Our research has discovered over 500 zero-day device vulnerabilities and led to the assignment of more than 220 mobile CVEs. Our technology allows us to test third-party components, vendor apps, and compiled binaries without needing source code.

We support industry security standards like OWASP, NAIP, NLST, CVE, and Sarif. We partner with organizations including Snyk, GitHub, Azure, GitLab, Guidepoint, Carahsoft, and Okta. We have received growth investment from USVP and Crosslink Capital and are SOC 2 Compliant.

We envision a world where every mobile app is free from exploitable issues before reaching end users. Our mission is to discover and deliver actionable mobile security intelligence, helping our customers proactively fix zero-day exploits. Our philosophy centers on proactive prevention and creating peace of mind in mobile security.