Appknox

by Appknox · Bengaluru, Karnataka · Since 2014

Mobile app security testing built in Bengaluru.

Cybersecurity & endpoint protectionMade in IndiaMobile app

Starting price: Price on request; Priced per unique app assessed
Free trial / plan: Free trial; First app scan free
Deployment: Cloud; Web, Android & iOS
App Advisor rating: 4.3; transparency & India fit

What is Appknox?

Appknox is a mobile application security testing platform that Harshit Agarwal and Subho Halder started building in Bangalore in 2014. It scans Android and iOS app binaries (.apk, .aab and .ipa) with static analysis, dynamic analysis and API testing, and adds manual penetration testing, app store monitoring through Storeknox, a binary-based SBOM, a privacy module and an AI prioritisation layer called KnoxIQ. The company says it works with 300+ enterprises, more than 60 of them in banking and financial services, and shows Paytm and Samsung among its logos.

The natural buyer in India is a fintech, bank, NBFC, insurer or consumer brand that ships its own mobile apps and needs repeatable security checks before each release. Appknox plugs into Azure Pipelines, Jenkins, CircleCI, Bitrise, Bitbucket, GitHub Actions and GitLab, so a scan can run on every build rather than once a quarter. Each build is also checked against Apple App Store and Google Play submission rules, which saves rejected releases.

Pricing is the interesting part. Appknox charges by the number of unique apps assessed, not by scans, so you can rescan the same app as often as you like. There are three tiers: Starter for small teams, Professional for up to 20 apps and Advanced for 20 or more, but none of them has a public price. You can pay as you go, monthly or annually, cancel any time with a prorated refund, and add SBOM, store monitoring, manual pen testing, SSO, on-premise or white-label as extras.

Two caveats. The free trial is real but limited: you upload one binary and get a baseline automated report, while CI/CD scans, API testing, full remediation guidance and authenticated testing are paid. And the compliance mapping covers GDPR, HIPAA, PCI-DSS, NIST, SAMA and DORA plus the OWASP mobile standards, but nothing for RBI, SEBI, CERT-In or the DPDP Act, so Indian regulated firms will still need their own mapping.

What works well

+Pricing is per unique app, so unlimited rescans of the same app cost nothing extra
+Combines SAST, DAST, API testing and optional manual pen testing in one console
+Ready-made CI/CD integrations for Jenkins, GitHub Actions, GitLab, Bitrise and Azure Pipelines
+Checks every build against App Store and Google Play submission requirements before release
+Free trial gives a real automated scan of your own APK, AAB or IPA file
+No long-term contract, with cancel-anytime and prorated refunds stated on the pricing page
+Storeknox watches app stores for drift, fake clones and brand abuse

What to watch out for

−None of the Starter, Professional or Advanced tiers shows a public price
−The free trial excludes API testing, CI/CD scans and full remediation guidance
−Compliance mapping does not cover Indian rules such as RBI, CERT-In or DPDP
−SBOM, manual pen testing, SSO and on-premise deployment are paid add-ons
−Focus is mobile apps; web application testing needs a separate tool

Best suited for: Indian fintechs, banks and NBFCs that release Android and iOS apps frequently · DevSecOps teams that want security scans triggered from the CI/CD pipeline · Brands worried about fake or cloned versions of their apps on app stores · Companies managing a portfolio of up to 20 mobile apps on the Professional tier

Appknox at a glance

Analysing Appknox — pricing, features, reviews and alternatives…

Generated by App Advisor's native engine from this listing's verified data — not a paid placement.

Appknox features

Researched from Appknox's official product pages · updated October 2026.

Automated vulnerability assessment

Static analysis (SAST) of app binaries
Dynamic analysis (DAST)
API security testing
CVSS scoring and OWASP mapping

Manual testing and expertise

Penetration testing by security experts
Detailed remediation guides
False positive removal from scores
Team training session

App store protection

Storeknox app store monitoring
Drift detection
Fake app and brand abuse detection
Store submission requirement checks

DevSecOps and platform

CI/CD integrations
CLI and public APIs
Security posture dashboards
User access control and project teams

Compliance and supply chain

Binary-based SBOM
Privacy Shield regulation checks
Compliance-based reporting
KnoxIQ AI risk prioritisation

AI capabilities

KnoxIQ prioritises exploitable risk and covers security for AI-embedded apps

Appknox pricing (USD)

Source

Every edition as published by the vendor · free trial: Free trial with one automated scan of an uploaded APK, AAB or IPA. Prices exclude GST unless stated. Full Appknox pricing breakdown

Starter

Quote

For small businesses and small teams
Automated SAST, DAST and API testing
Compliance-based reports with remediation support

Professional

Quote

For organisations with up to 20 mobile apps
Unlimited rescans of assessed apps
Multiple users and project teams

Advanced

Quote

For businesses with 20+ apps
Automated scans via CI/CD integration
Dedicated customer success manager

Other pricing options & add-ons

SBOM
Quote
Store monitoring (Storeknox)
Quote
Manual penetration testing
Quote
On-premise deployment, SSO, white-label
Quote

• Pricing is based on unique apps assessed, not scans.
• Pay as you go, monthly or annual; no long-term contract; prorated refund on cancellation.
• Extra apps beyond the plan limit need an upgrade or a per-app fee.

Buying for a team? App Advisor can get you a volume quote and any partner discount available.

Integrations, security & India

Integrations

Azure Pipelines
Jenkins
CircleCI
App Center
Bitbucket Pipelines
Bitrise
GitHub Actions
GitLab
ArmorCode
Appknox CLI
Appknox Public API

Security & compliance

Access to customer data restricted to authorised employees
Service runs over HTTPS
SSO, two-factor authentication and strong password policies supported

For Indian businesses

Founded by Harshit Agarwal and Subho Halder, with the company's story beginning in Bangalore in 2014
Paytm appears among the customer logos on Appknox's About page
The compliance page maps to GDPR, PCI-DSS, SAMA and DORA but lists no Indian frameworks such as RBI, CERT-In or DPDP, so Indian regulated firms should request a custom mapping

Support, resources & partner network

Support & learning

Chat support, a delivery manager and a dedicated customer success manager listed among plan features
Onboarding session to walk the security team through the tool
Knowledge base access

Pricing Free trial Integrations Compliance

Trust, compliance & who uses Appknox

300+ enterprises, 60+ in BFSI

Customers

2014

In business since

Certifications & compliance

OWASP Mobile Top 10 2024 and MASVS v2 — Test cases mapped to OWASP mobile standards Source
PCI-DSS v4.0 — Compliance-based reporting; Appknox does not issue certifications Source
GDPR and HIPAA — Mapped checks in reports Source

Each claim links to the vendor's own published statement. Always confirm current certificate validity directly with the vendor.

Appknox timeline — releases & milestones

2014Founders start work on mobile app security in BangaloreSource
2018Platform and team refined for global customersSource
2022SAST, DAST, API and manual pen testing offered togetherSource

Is Appknox the best choice for you?

Best choice if you are…

Indian fintechs, banks and NBFCs that release Android and iOS apps frequently
DevSecOps teams that want security scans triggered from the CI/CD pipeline
Brands worried about fake or cloned versions of their apps on app stores
Companies managing a portfolio of up to 20 mobile apps on the Professional tier

Look elsewhere if you are…

Teams that mainly need web application or network security testing
Small developers looking for a free, open-source mobile scanner with no sales contact

Still comparing? Get an unbiased shortlist and demos arranged for free.

Sources (6) · updated October 2026

Appknox screenshots

Specifications

Category: Cybersecurity & endpoint protection
Vendor: Appknox
Headquarters: Bengaluru, Karnataka
Founded: 2014
Pricing model: Quote-based
Starting price: On request
Deployment: Cloud
Platforms: Web, Android, iOS
Best for: Mid-market, Enterprise
Made in India: Yes

Rs. 1,920 (home Total Security offer price) · Business editions priced on request

View

Compare all Appknox alternatives with pricing →

Appknox — frequently asked questions

How much does Appknox cost in India?+

Appknox does not publish prices for its Starter, Professional or Advanced tiers. Pricing is based on the number of unique mobile apps you assess, not the number of scans, and you can pay as you go or subscribe monthly or annually. Indian buyers need to request a quote, and startups can ask for special pricing through the contact page.

Does Appknox have a free trial?+

Yes. Appknox offers a free trial in which you upload one .apk, .aab or .ipa file and receive a baseline automated vulnerability report with CVSS scores and OWASP mapping. The trial does not include CI/CD scans, API testing, full remediation guidance or manual pen testing, which are paid features. Its pricing FAQ says the first app scan is free.

Is GST added to Appknox invoices?+

Appknox's public pricing page does not mention GST or show rupee prices, because all plans are quote-based. As software sold to Indian businesses, the subscription would normally attract GST. When you request a quote, ask Appknox to state the GST treatment and billing entity clearly so your accounts team can claim input tax credit.

What does Appknox test in a mobile app?+

Appknox runs static analysis (SAST) on the app binary, dynamic analysis (DAST) on the running app and API security testing, then adds optional manual penetration testing by its security team. It also produces a binary-based SBOM, checks privacy behaviour and verifies each build against App Store and Google Play submission requirements.

Can Appknox run inside our CI/CD pipeline?+

Yes. Appknox lists ready integrations for Azure Pipelines, Jenkins, CircleCI, App Center, Bitbucket Pipelines, Bitrise, GitHub Actions and GitLab, plus a CLI and public APIs. That lets every new build of your Android or iOS app be scanned automatically. CI/CD-triggered scanning is a paid feature and is not part of the free trial.

Appknox vs MobSF: which is better?+

MobSF is a free open-source scanner that suits developers comfortable running and interpreting it themselves. Appknox is a commercial platform that adds DAST, API testing, manual pen testing, store monitoring, compliance reports and a customer success manager. Indian banks and fintechs that need audit-ready reports and support usually find Appknox easier to justify to auditors.

Does Appknox help with RBI or CERT-In compliance?+

Appknox's compliance page maps its tests to GDPR, HIPAA, PCI-DSS, NIST, SAMA, DORA and OWASP mobile standards, but it does not list RBI, SEBI, CERT-In or the DPDP Act. Appknox also says it does not issue compliance certifications. Indian regulated entities can still use its reports as evidence, but should map findings to Indian guidelines themselves.

How does Appknox protect our app and data?+

Appknox states that only authorised employees can access customer data, the service runs over HTTPS, and accounts support SSO, two-factor authentication and strong password policies. For companies that cannot upload binaries to a cloud service, Appknox offers on-premise deployment as a paid add-on.

How long does Appknox take to set up and scan?+

Setup is light because Appknox scans the compiled app binary, so no SDK has to be added to your code. The free trial page says an automated SAST scan typically completes in about 10 to 15 minutes. Appknox also offers a training session for your security team, and pipeline integration can be added once the first scans are reviewed.

What happens if we exceed the number of apps in our Appknox plan?+

Appknox's pricing FAQ says you can either upgrade to a higher tier or pay a per-app fee for the extra apps. Professional covers up to 20 apps and Advanced is for 20 or more. Rescanning an app already in your plan does not cost extra, and subscriptions can be cancelled with a prorated refund.

How much does Appknox cost?+

Appknox publishes its plans at https://www.appknox.com/pricing. Check that page for current prices, as plans change.

Does Appknox have a free trial?+

Yes. Appknox's official site offers a free trial.

Is Appknox secure and compliant?+

Appknox's official site states GDPR, HIPAA, PCI DSS compliance.

What is Appknox?+

Appknox is cybersecurity & endpoint protection by Appknox, an Indian company from Bengaluru. Mobile app security testing built in Bengaluru.

How much does Appknox cost?+

Appknox is priced on request. Request a demo through App Advisor and we will ask the vendor for a written quote.

Does Appknox offer a free trial or free plan?+

Appknox does not advertise a free plan; ask the vendor for a trial or a guided demo.

Is Appknox made in India?+

Yes. Appknox is built by Appknox, headquartered in Bengaluru, Karnataka.

Who is Appknox best suited for?+

Appknox suits mid-market, enterprise buyers looking for cybersecurity & endpoint protection.

What are the best alternatives to Appknox?+

Popular alternatives in cybersecurity & endpoint protection include ManageEngine ADManager Plus, ManageEngine Endpoint Central, Zoho Vault. Use App Advisor's compare tool to see them side by side.

How is Appknox deployed?+

Appknox is available as a cloud (SaaS) product, with web, Android and iOS apps.