Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Designed for app development, Q-mast embeds security directly into your workflow to identify security, privacy, and compliance risks before the mobile app is released. With a design tailored for DevSecOps workflows, Q-mast supports continuous, automated security testing that aligns with tools like Jenkins, GitLab, and GitHub.
Q-mast capabilities include automated scanning in minutes, no source code needed; analysis of compiled app binary, regardless of in-app or run-time obfuscations; precise SBOM generation and analysis for vulnerability reporting to specific library version, including embedded libraries; comprehensive static (SAST), dynamic (DAST), interactive (IAST) and forced-path execution app analysis; malicious behavior profiling, including app collusion; and checks against privacy & security standards including NIAP, NIST, MASVS.
Description
Recognized as the top-rated DAST solution by an independent research organization for three consecutive years, this tool automatically evaluates contemporary web applications and APIs while minimizing false positives and overlooked vulnerabilities. It accelerates remediation efforts through comprehensive reporting and seamless integrations, keeping compliance and development teams informed. Regardless of the scale of your application portfolio, it enables effective management of security assessments. The solution autonomously navigates and evaluates web applications to uncover vulnerabilities such as SQL Injection, XSS, and CSRF. With a modern interface and user-friendly workflows built on the Insight platform, InsightAppSec is straightforward to deploy, manage, and operate. Additionally, it can scan applications hosted on isolated networks with the optional on-premise engine. Furthermore, InsightAppSec provides assessments and reports on your web application's compliance with PCI-DSS, HIPAA, OWASP Top Ten, and various other regulatory standards, ensuring a comprehensive approach to application security. This multifaceted solution supports organizations in enhancing their security posture while streamlining assessment processes.
API Access
Has API
Yes
API Access
Has API
Yes
Integrations
Jenkins
Yes
Azure DevOps Server
Yes
Azure Pipelines
No
BMC Helix ITSM
No
BeyondTrust Endpoint Privilege Management
No
Carbon Black EDR
No
Cisco pxGrid
No
Coalfire
No
CyberArk Privileged Access Manager
No
Do Status
No
Integrations
Jenkins
Yes
Azure DevOps Server
No
Azure Pipelines
Yes
BMC Helix ITSM
Yes
BeyondTrust Endpoint Privilege Management
Yes
Carbon Black EDR
Yes
Cisco pxGrid
Yes
Coalfire
Yes
CyberArk Privileged Access Manager
Yes
Do Status
Yes
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Pricing Details
$2000 per app per year
Free Trial
Yes
Free Version
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
Yes
iPad App
Yes
Android App
Yes
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Quokka
Founded
2011
Country
United States
Website
www.quokka.io/products/q-mast
Vendor Details
Company Name
Rapid7
Founded
2000
Country
United States
Website
www.rapid7.com/products/insightappsec/
Product Features
Mobile App Development
Access Controls / Permissions
No
Any App Development Language
No
Collaboration Tools
No
Compatibility Testing
No
Data Modeling
No
Debugging
No
Drag and Drop Editor
No
Enterprise Mobility (EMM/MAM)
No
FaceID and TouchID
No
For Consumer Apps
No
For Enterprise Apps
No
Integration Options
No
Mobile App Security
No
Multi-Factor Authentication (MFA)
No
Multiple Apps from Same Base
No
No Dependencies
No
No-Code
No
Reporting / Analytics
No
Single Sign-On (SSO)
No
Source Control
No
Visual Editor
No
Mobile App Testing
Functional Testing
No
Installation Testing
No
Interruption Testing
No
Memory Testing
No
Performance Testing
No
Usability Testing
No
Static Application Security Testing (SAST)
Application Security
No
Dashboard
No
Debugging
No
Deployment Management
No
IDE
No
Multi-Language Scanning
No
Real-Time Analytics
No
Source Code Scanning
No
Vulnerability Scanning
No
Vulnerability Scanners
Asset Discovery
No
Black Box Scanning
No
Compliance Monitoring
No
Continuous Monitoring
No
Defect Tracking
No
Interactive Scanning
No
Logging and Reporting
No
Network Mapping
No
Perimeter Scanning
No
Risk Analysis
No
Threat Intelligence
No
Web Inspection
No
Product Features
Application Security
Analytics / Reporting
No
Open Source Component Monitoring
No
Source Code Analysis
No
Third-Party Tools Integration
No
Training Resources
No
Vulnerability Detection
No
Vulnerability Remediation
No
Static Application Security Testing (SAST)
Application Security
No
Dashboard
No
Debugging
No
Deployment Management
No
IDE
No
Multi-Language Scanning
No
Real-Time Analytics
No
Source Code Scanning
No
Vulnerability Scanning
No