Ostorlab

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

Ostorlab is ranked #2 of 21 in mobile application security testing software on Inferse. It runs on Android, API, iOS, Web. There is a free plan. Paid plans start at $299/mo.

Compared on mobile application security testing software

Free plan: Yesostorlab.co
Mobile platforms: bothostorlab.co
Static binary analysis: Yesostorlab.co
Dynamic app analysis: Yesostorlab.co
Sensitive-data flow: Yesostorlab.co
Deployment model: cloudostorlab.co

Facts

Product: Ostorlab provides agentic penetration testing for mobile apps, web apps, APIs, and connected source code.ostorlab.co · 30 Sept 2026
Authenticated testing: Its agents can handle logins, one-time codes, and multi-factor authentication to test logged-in workflows.ostorlab.co · 30 Sept 2026
Exploit evidence: AI-agent findings include a working proof-of-concept exploit that can be replayed.ostorlab.co · 30 Sept 2026
Attack paths: Ostorlab tests connected apps, APIs, web back ends, and source code together to identify exploit paths across assets.ostorlab.co · 30 Sept 2026
Analysis: The platform combines static, dynamic, runtime, and behavioral analysis, plus dependency and source repository scanning.ostorlab.co · 30 Sept 2026
Integrations: Listed integrations include GitHub Actions, GitLab CI, Bitbucket, Jenkins, CircleCI, Azure DevOps, Jira, ServiceNow, Slack, and SAML SSO.ostorlab.co · 30 Sept 2026
Enterprise security: Enterprise lists SSO/SAML, role-based access control, audit logs, bring-your-own AI key, data residency in the US, EU, GCC, or APAC, and on-premises deployment as an add-on.ostorlab.co · 30 Sept 2026
Security report: The site links to a SOC 2 Type II report through its Trust Center.ostorlab.co · 30 Sept 2026
Supported mobile platforms: Ostorlab lists Android, iOS, and HarmonyOS mobile app testing.ostorlab.co · 30 Sept 2026
Input formats: Supported scan inputs include Android APK, XAPK, and AAB files and non-encrypted iOS IPA files, as well as store and TestFlight scans.ostorlab.co · 30 Sept 2026
Plan limit: AppSec Mobile covers one mobile app, up to three Web/API targets, and up to three source code repositories.ostorlab.co · 30 Sept 2026
Credit usage: Routine workspace testing continues when AI Security Credits run out, while advanced AI actions require more credits.ostorlab.co · 30 Sept 2026
Who it serves: The site describes the product as built for teams securing mobile products, including mobile engineering and AppSec teams.ostorlab.co · 30 Sept 2026
Support: Enterprise support options include Standard, 24/5 Priority, or a dedicated technical account manager with a 24/7 SLA.ostorlab.co · 30 Sept 2026