Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Designed for app development, Q-mast embeds security directly into your workflow to identify security, privacy, and compliance risks before the mobile app is released. With a design tailored for DevSecOps workflows, Q-mast supports continuous, automated security testing that aligns with tools like Jenkins, GitLab, and GitHub. Q-mast capabilities include automated scanning in minutes, no source code needed; analysis of compiled app binary, regardless of in-app or run-time obfuscations; precise SBOM generation and analysis for vulnerability reporting to specific library version, including embedded libraries; comprehensive static (SAST), dynamic (DAST), interactive (IAST) and forced-path execution app analysis; malicious behavior profiling, including app collusion; and checks against privacy & security standards including NIAP, NIST, MASVS.

Description

Recognized as the top-rated DAST solution by an independent research organization for three consecutive years, this tool automatically evaluates contemporary web applications and APIs while minimizing false positives and overlooked vulnerabilities. It accelerates remediation efforts through comprehensive reporting and seamless integrations, keeping compliance and development teams informed. Regardless of the scale of your application portfolio, it enables effective management of security assessments. The solution autonomously navigates and evaluates web applications to uncover vulnerabilities such as SQL Injection, XSS, and CSRF. With a modern interface and user-friendly workflows built on the Insight platform, InsightAppSec is straightforward to deploy, manage, and operate. Additionally, it can scan applications hosted on isolated networks with the optional on-premise engine. Furthermore, InsightAppSec provides assessments and reports on your web application's compliance with PCI-DSS, HIPAA, OWASP Top Ten, and various other regulatory standards, ensuring a comprehensive approach to application security. This multifaceted solution supports organizations in enhancing their security posture while streamlining assessment processes.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Jenkins
Azure Pipelines
BMC Helix ITSM
BeyondTrust Endpoint Privilege Management
Carbon Black EDR
Cisco pxGrid
CyberArk Privileged Access Manager
Do Status
GitHub
GitLab
Jira
Jira Work Management
Microsoft 365
Modulo Risk Manager
Rapid7 Command Platform
RedSeal
Selenium IDE
Swagger
VMware NSX

Integrations

Jenkins
Azure Pipelines
BMC Helix ITSM
BeyondTrust Endpoint Privilege Management
Carbon Black EDR
Cisco pxGrid
CyberArk Privileged Access Manager
Do Status
GitHub
GitLab
Jira
Jira Work Management
Microsoft 365
Modulo Risk Manager
Rapid7 Command Platform
RedSeal
Selenium IDE
Swagger
VMware NSX

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

$2000 per app per year
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Quokka

Founded

2011

Country

United States

Website

www.quokka.io/products/q-mast

Vendor Details

Company Name

Rapid7

Founded

2000

Country

United States

Website

www.rapid7.com/products/insightappsec/

Product Features

Mobile App Development

Access Controls / Permissions
Any App Development Language
Collaboration Tools
Compatibility Testing
Data Modeling
Debugging
Drag and Drop Editor
Enterprise Mobility (EMM/MAM)
FaceID and TouchID
For Consumer Apps
For Enterprise Apps
Integration Options
Mobile App Security
Multi-Factor Authentication (MFA)
Multiple Apps from Same Base
No Dependencies
No-Code
Reporting / Analytics
Single Sign-On (SSO)
Source Control
Visual Editor

Mobile App Testing

Functional Testing
Installation Testing
Interruption Testing
Memory Testing
Performance Testing
Usability Testing

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Vulnerability Scanners

Asset Discovery
Black Box Scanning
Compliance Monitoring
Continuous Monitoring
Defect Tracking
Interactive Scanning
Logging and Reporting
Network Mapping
Perimeter Scanning
Risk Analysis
Threat Intelligence
Web Inspection

Product Features

Application Security

Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Alternatives

AppScan Reviews

AppScan

HCLSoftware