NowSecure

What the company sells

NowSecure sells mobile application risk management software that analyzes compiled iOS and Android app binaries on real devices to find hidden AI, risky SDKs, vulnerabilities and data flows. NowSecure says it helps organizations secure and govern mobile app risk, from code and dependencies to runtime behavior and data flows.

NowSecure says more than half of the 50,000+ mobile apps it analyzes each month contain undisclosed AI. NowSecure says most AI governance programs cover SaaS, cloud, and employee AI tools. NowSecure says it builds the mobile app record those programs are missing: which apps contain AI, what data it touches, where that data goes, and who owns the risk.

NowSecure analyzes the shipped mobile binary to identify AI models, SDKs, dependencies, APIs, and indicators of AI-generated code. NowSecure runs the app on real devices to observe live behavior, permissions, connections, and data movement. NowSecure says the result is a Dynamic SBOM showing every component and where its data lands. NowSecure says it fills the gap with binary and runtime truth, not source, SBOM, or SCA assumptions.

Mobile Application Risk Management brings four risk domains into one operating model. NowSecure says Mobile Application Risk Management exists to close visibility gaps before they become business events. NowSecure gives enterprises continuous, evidence-based visibility into the security, privacy, compliance, and AI risk inside the mobile apps they build, use, and manage. NowSecure says the new shape of mobile app risk management is continuous, evidence-based, and proportioned to business impact, governing security, privacy, safety, compliance, and AI risk in one program. NowSecure describes a living catalog of apps, SDKs, APIs, AI components, data destinations, and ownership across the mobile estate. NowSecure says it gives every accountable function the evidence to find hidden AI, govern data flows, and reduce risk across the apps an organization builds and uses.

NowSecure tests the compiled iOS and Android app on real devices, logged in, with every SDK and AI feature inside it. NowSecure says AI-Navigator logs in so dynamic testing reaches every post-login screen. NowSecure research found that authenticated mobile app security testing finds 78% more sensitive data risk. Customers can upload an IPA or APK, or trigger tests automatically from GitHub Actions, GitLab, Azure DevOps, Jenkins, CircleCI, or Bitrise. NowSecure maps findings to OWASP MASVS and sends them to the customer's tracker with remediation guidance. NowSecure adds Guided Testing or Pen Testing as a Service when an app needs an analyst to work through MFA. NowSecure identifies every component inside the compiled app and watches what each one does at runtime. NowSecure identifies the AI inside an app and shows what data reaches it.

NowSecure inspects compiled iOS, Android, and hybrid apps to identify every dependency, framework, and SDK actually present. NowSecure generates SBOMs for each build, storing version history and provenance. A signed, machine-readable SBOM in CycloneDX or SPDX is generated and versioned. NowSecure produces SBOMs automatically at each merge or release, within GitHub Actions, GitLab, Jenkins, and Azure DevOps. NowSecure correlates SBOM data with live CVE, CWE, and license feeds for immediate risk visibility. NowSecure says organizations using Dynamic Mobile SBOM transition from reactive audits to proactive risk governance.

NowSecure Privacy protects sensitive data, minimizes compliance exposure, and maintains trust. NowSecure tests for the OWASP MASVS throughout the mobile app security testing software and services. NowSecure supports organizations looking to comply with ISO 27001 by implementing mobile app security controls. NowSecure says it helps write the mobile security standards auditors rely on and maintains the open-source tools that power runtime analysis worldwide. Carlos Holguera, a NowSecure principal research engineer, co-leads the OWASP Mobile Application Security project that maintains MASVS and MASTG.

For mobile banking apps, NowSecure says new regulatory standards demand a real-time Mobile App BOM and continuous runtime validation. NowSecure says financial institutions are fully accountable for every component shipped to production, including software their internal engineers never wrote. NowSecure says it generates an audit-ready Mobile Application Bill of Materials through automated binary analysis on every build. NowSecure helps federal, local and state agencies, including AirForce’s BESPIN software factory, deliver secure mobile apps. NowSecure Platform performs static, dynamic, interactive and API security analysis across the mobile apps in an organization's environment.

NowSecure cites NIAP, ISO 17025, and Google MASA lab credentials. Independent auditor Coalfire completed its review of NowSecure and issued an attestation report finding zero deficiencies. NowSecure provides a SOC 2 report to requesters who first execute an NDA.^{[2][5][6][7][8][9][10][11][12]}

Categories

• Mobile security (primary category)
• AI model and agent security
• Compare NowSecure with companies in the same categoryside by side

Headquarters

Chicago, United States^[1]

Founded

Not established from our sources

Ownership

Not established from our sources

CISO on record

Not yet on our record. Send a verified source

Website

nowsecure.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Mobile Application Risk Management^[1][2][3][5]

  Continuously assesses apps a company builds and third-party apps its workforce uses.

  NowSecure gives enterprises continuous visibility into the security, privacy, compliance, and AI risk inside the mobile apps they build, use, and manage. Findings are based on what shipped apps do on real devices at runtime.

• Dynamic Mobile SBOM^[7]

  Generates SBOMs from binary analysis of iOS, Android and hybrid apps.

  NowSecure inspects compiled iOS, Android, and hybrid apps to identify every dependency, framework, and SDK actually present. It generates SBOMs for each build, storing version history and provenance.

• NowSecure Privacy^[8]

  Protects sensitive data and minimizes compliance exposure in mobile apps.

  NowSecure Privacy protects sensitive data, minimizes compliance exposure, and maintains trust. NowSecure describes continuous mobile privacy testing as identifying excessive permissions, hidden data sharing, insecure SDK behaviors, and policy violations across iOS and Android applications.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of NowSecure's categories, then alphabetical. A list from the record, never a ranking.

• On mobile security, NowSecure competes with BlackBerry, iVerify, Lookout, Protectt.ai, Zimperium, Appdome, Assail, BlackCloak, Data Theorem, ESET and 5 more.

• On ai model and agent security, NowSecure competes with AIShield, Alice, Asymptote Labs, Bay, Dreadnode, Enkrypt AI, Fiddler AI, HiddenLayer, Knostic, Mindgard and 54 more.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

• G2 · 4.6 out of 5^[4]seen November 4, 2026

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• April 28, 2026

  NowSecure announced Mobile App Risk Intelligence (MARI), giving enterprises evidence-based visibility into third-party mobile apps, including hidden AI components and data flows. NowSecure^[13]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]Nowsecure launches ai data partner program to expand mobile application risk intelligence for security platformsNowSecure · nowsecure.com · published March 18, 2026 · Tier A: the company, a regulator or a filing
2. [2]nowsecure.comNowSecure · nowsecure.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
3. [3]Enterprise Mobile App Security & AI Governance | NowSecureNowSecure · undated page, accessed October 27, 2026 · Tier A: the company, a regulator or a filing
4. [4]NowSecure Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 27, 2026 · Tier C
5. [5]Mobile App Risk Management Platform & Programs | NowSecureNowSecure · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
6. [6]Mobile app security testing (MAST) for iOS & Android | NowSecureNowSecure · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
7. [7]Dynamic SBOM for iOS and Android Mobile Apps | NowSecureNowSecure · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
8. [8]Mobile Application Privacy Testing | NowSecure PrivacyNowSecure · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
9. [9]Mobile App Security Standards & Compliance | NowSecureNowSecure · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
10. [10]Financial Services - NowSecureNowSecure · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
11. [11]Government - NowSecureNowSecure · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
12. [12]Request NowSecure SOC 2 ReportNowSecure · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
13. [13]NowSecure Launches MARI to Close the AI Governance Gap in Third-Party Mobile AppsNowSecure · published April 28, 2026 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 4, 2026 from the references above.

Work for NowSecure? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.