PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Aikido launches agentic pentesting for Android apps

aikido.dev | blog | #ai-security | #pentesting | #appsec | #android | #mobile-security | #aikido | #ai-agents
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Aikido extends agentic pentesting to Android: agents install the real APK, log in like users, and reason through the app together with its backend (whitebox; source repo required), returning findings with ADB reproduction steps and AutoFix support, targeting mobile's traditionally shallow coverage.

Why it matters

This coverage shows how agentic workflows are expanding from web applications into automated mobile binary assessments.
Published
Collected

Related coverage

blog · aikido.dev
Aikido launches external network pentesting
TL;DR: Aikido now pentests your external network. Attackers already test your perimeter every day, and with AI agents doing the grunt work, they're faster than ever. Now you can run the same test first. Give our agents one domain and they'll map the internet-facing systems you run and attack them from the outside, exactly like a malicious actor would.
blog · aikido.dev
Adding Aikido AI pentesting to your existing security stack
How to add Aikido's AI pentesting on top of the SAST, SCA and cloud tools you already run, from your first pentest through whitebox testing, continuous testing and remediation.
blog · aikido.dev
More pentesting, same budget, no surprises
Development teams ship faster than ever with AI-assisted coding. Features that previously took weeks can now be delivered in days. But security testing still runs on the old schedule. In Aikido's 2026 State of AI in Pentesting report, we found that 76% of organizations deploy significant production changes weekly or faster, while just 21% validate security on every release.
blog · aikido.dev
How Aikido helps you meet SOC 2 Type 1 and Type 2
# How Aikido helps you meet SOC 2 Type 1 and Type 2 Written by Jens Gellynck Published on: Oct 7, 2026 If you've ever gone through a SOC 2 audit, you know the drill. It’s weeks of screenshotting...
blog · aikido.dev
Introducing Aikido Altar: the model that makes sovereign security intelligence possible
Altar is Aikido's open-weight security model, derived from GLM-5.3 via quantization and expert pruning (1.51 TB to 328 GB), running on-prem in Aikido Machine, including air-gapped networks.
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
Back