Integrate mobile app security into your CI/CD pipeline. API-driven scanning, multi-framework compliance reports in under 10 minutes, and quality gates to block insecure builds. Shift security left.
Upload binaries, trigger scans, and retrieve results programmatically. Full API access for Android APK/AAB and iOS IPA files.
Get notified when scans complete. Configure webhook endpoints to trigger downstream actions in your pipeline automatically.
JSON for pipeline integration, HTML for human review, PDF for compliance audits. All formats include findings, evidence, and remediation.
Upload your build artifact and get results in minutes. No SDK integration, no source code access needed.
# Upload and scan your mobile app
- name: Security Scan
run: |
# Upload binary and start scan
SCAN_ID=$(curl -s -X POST \
https://api.appaudix.com/v1/scan \
-H "Authorization: Bearer ${{ secrets.APPAUDIX_KEY }}" \
-F "file=@app-release.apk" \
-F "frameworks=pci-dss,owasp,hipaa" \
| jq -r '.scan_id')
# Poll for results
while true; do
STATUS=$(curl -s \
"https://api.appaudix.com/v1/scan/$SCAN_ID" \
-H "Authorization: Bearer ${{ secrets.APPAUDIX_KEY }}" \
| jq -r '.status')
[ "$STATUS" = "completed" ] && break
sleep 30
done
# Fail on critical findings
CRITICAL=$(curl -s \
"https://api.appaudix.com/v1/scan/$SCAN_ID/results" \
-H "Authorization: Bearer ${{ secrets.APPAUDIX_KEY }}" \
| jq '.findings | map(select(.severity == "critical")) | length')
[ "$CRITICAL" -gt 0 ] && exit 1Everything your security team needs to manage mobile app security at scale.
Role-based access control with admin, developer, and auditor roles
Track security posture across releases with historical scan data
Block builds on critical or high-severity findings automatically
Re-scan after fixes to verify remediation before release
Complete scan history with timestamped results for compliance audits
PCI-DSS, OWASP, HIPAA, GDPR, LGPD, SOC 2, NIST — all from one API call
Start scanning your mobile apps on every build. API access, compliance reports, and quality gates — all in under 10 minutes.
We use necessary storage for security and login. With your permission, we also use analytics to understand page journeys and marketing pixels to measure ad campaigns.