NowSecure is a mobile application risk management company focused on security, privacy, and compliance testing for mobile apps. Its portfolio combines automated software, analyst-guided assessments, expert services, and training so organizations can secure the mobile apps they build and make better decisions about the apps they use across their environments.
Built around real-device testing, binary analysis, open standards, and large-scale app intelligence, NowSecure addresses mobile DevSecOps, third-party app vetting, privacy risk management, and standards-based validation. Its offerings span continuous cloud testing, on-premises analyst tooling, penetration testing, and mobile AppSec education, giving security, development, and risk teams multiple ways to operationalize mobile security programs.
Offerings, Capabilities, and Integrations
NowSecure delivers automated static, dynamic, interactive, and API security testing for mobile applications, with authenticated coverage for post-login workflows, privacy analysis for data leaks and over-collection, and policy-based reporting aligned to common mobile security and compliance frameworks. It also complements automation with human-augmented testing and expert-led services for higher-risk or more complex applications.
Its platform is designed to plug into existing engineering and security operations. NowSecure supports pre-built integrations with CI/CD tools such as GitHub, Microsoft Azure DevOps, Jenkins, CircleCI, GitLab, and Bitrise; issue-tracking systems such as Jira, GitHub Issues, Azure Boards, and GitLab Boards; and vulnerability-management tools including CodeDX, Threadfix, and Brinqa. It also provides APIs, CLI access, GraphQL, and GitHub Actions to fit developer-first workflows.
Products and Services
- NowSecure Platform: Cloud-based continuous mobile app security and privacy testing for apps teams build and use, combining automated analysis with SDLC integrations and portfolio-level reporting.
- NowSecure Platform Guided Testing: A human-augmented testing option that pairs NowSecure Platform automation with analyst navigation to cover complex or sensitive mobile workflows and anti-automation controls.
- NowSecure AI Navigator: Authenticated mobile testing capability that automates login and workflow navigation so teams can reach post-login risk areas and reduce authenticated testing setup time.
- NowSecure Mobile App Risk Intelligence (MARI): Evidence-based third-party mobile app risk intelligence for app vetting, showing findings, risk drivers, AI components, permissions, network destinations, and supply-chain issues at scale.
- NowSecure Workstation: An on-premises hardware and software kit for mobile security analysts that supports interactive, repeatable assessments of complex mobile app configurations on real devices.
- NowSecure PTaaS: Penetration Testing as a Service that blends continuous automated testing with expert-led assessments for mobile and related applications, with compliance-oriented reporting and retesting workflows.
- NowSecure ADA MASA: Independent security review service for Android apps pursuing Google Play Data safety validation through the App Defense Alliance MASA program.
- NowSecure Privacy: Mobile privacy testing solution that detects and helps remediate privacy leaks, unsafe data sharing, and disclosure gaps across first-party and third-party mobile apps.
- NowSecure Academy: Mobile AppSec training and certification offering with free online courses, role-based learning paths, product training, and industry-recognized certifications for development and security teams.
- NowSecure GitHub Actions: GitHub-integrated mobile app analysis and mobile SBOM actions that bring NowSecure testing and dependency visibility directly into GitHub workflows and security views.
Target Customers
NowSecure targets large enterprises, government agencies, and mobile-first organizations that need dedicated controls for the mobile apps they build, distribute, or allow in their environments. Its industry focus on its website spans financial services, healthcare, government, retail and hospitality, and high tech and telecommunications.
Within those organizations, NowSecure serves AppSec, DevSecOps, mobile development, QA, privacy, compliance, IT, endpoint, and risk teams. Its mix of build-pipeline testing, third-party app intelligence, standards-based validation, and training is suited to teams that need both developer-facing automation and centralized governance over mobile application risk.
Cloud Integrations and Marketplace
- AWS Marketplace: NowSecure Mobile App Security Testing is listed in AWS Marketplace as a SaaS offering for automated continuous mobile app security testing, with CI/CD integrations and API support for DevSecOps workflows.
- Microsoft Azure Marketplace: NowSecure Platform is available through Microsoft Azure Marketplace, where it is positioned for automated continuous mobile app security testing and integration with Microsoft Azure DevOps and GitHub.
Key People
- Alan Snyder: CEO
- Andrew Hoog: Founder & Board Member
- David Weinstein: CTO
- Daniel Moskowitz: CFO
- Carolyn Crandall: CMO
- George Anderson: SVP, Engineering
- Brian Murphy: SVP, Sales
- Katie Bochnowski (Strzempka): SVP, Customer Success & Services
- Azeb Shifaraw-Clyburn: SVP, People & Culture
- Ted Eull: VP, Security & Governance
- Dawn Isabel: VP, Research
- Michael Krueger: VP, Professional Services
Key Facts
- Headquarters: Chicago, Illinois, United States
- Employees: 51-200
- Annual Revenue: Undisclosed
- Parent Company: None
- Subsidiaries: None
- Publicly Listed: Not publicly listed
Analyst Recognitions
- Gartner: 2023 Gartner Hype Cycle for Application Security – Sample Vendor for Mobile Application Security Testing.
- IDC: 2019 IDC MarketScape: Worldwide Mobile App Security Testing Vendor Assessment – InfoSec Emphasis – Leader. 2019 IDC MarketScape: Worldwide Mobile App Security Testing Vendor Assessment – DevSecOps Emphasis – Leader.
