About | Quokka
We’re helping protect the global mobile ecosystem.
Quokka (formerly known as Kryptowire) is a mobile security company trusted by Fortune 500 companies and governments worldwide to reduce their mobile attack surface. Utilizing AI-powered engines, Quokka reveals what apps actually do, going beyond surface scanning and static code analysis to deliver visibility and control over mobile app threats.
Mobile App Security Testing for apps you build
Perform comprehensive analysis on iOS and Android apps—without requiring source code—to uncover real security, privacy, and compliance risks.
Mobile App Vetting for apps employees use
Proactively vet mobile apps to detect known and unknown risks in mobile apps and their supply chains, and deploy agentlessly with MDM integration.
Firmware Security Analysis for Android devices
Identify vulnerabilities and threats in the underlying software and system applications of devices powered by Android.
Our customers
“Quokka’s step-by-step approach has notably improved how we handle mobile application vulnerabilities. It’s made managing security assessments across our mobile app ecosystem much smoother and more effective and brought consistency to our security standards. Quokka stands out as a collaborative partner, providing proactive support that truly enhances our experience.”
Security Leader, Fortune 100 CPG Company
We’re on a mission to discover and deliver actionable mobile security intelligence to enable our customers to proactively remediate zero-day exploits.
Trusted by the US Federal Government since 2011
Our history
Appointed Baris Karadogan CEO
2026
Launched Q-firm for firmware security testing
2026
Joined Microsoft Intelligent Security Association (MISA)
2026
Introduced Q-scout integration with Microsoft Sentinel
2026
Published research on Uhale digital frames security vulnerabilities
2025
Assigned 11 CVEs
2025
Partnered with Four Inc. for Federal distribution
2025
The Cyber Security Agency of Singapore (CSA) launches the Safe App Portal, powered by Quokka
2025
Named a Sample Vendor in the 2025 Gartner® Hype Cycle™ for Application Security
2025
Partnered with Hexnode UEM for mobile app security
2025
Recognized in Gartner® How to Avoid Common Cybersecurity Pitfalls in Mobile App Development
2025
Introduced Q-scout integration with Microsoft Intune
2025
Spoke at Mobile World Congress Las Vegas
2024
Named NVTC Cyber 50 Honoree – Cyber Company
2024
Named NVTC Cyber 50 Honoree – Rising Star
2024
Presented at DEFCON 32
2024
Assigned 2 CVEs
2024
Named partner in GuidePoint Security’s Federal Emerging Cyber Vendor Program
2024
Listed in Gartner®️ Hype Cycle™️ for Application Security
2024
Launched industry’s first Mobile App Security Intelligence Platform
2024
Listed in Gartner report, A Guidance Framework for Building an Application Security Framework
2024
Presented at Black Hat MEA
2023
Assigned 17 CVEs
2023
Spoke at Singapore International Cyber Week
2023
Presented at Information Security: 26th International Conference, ISC 2023
2023
Named NVTC Cyber50 Awards Honoree
2023
Awarded Global InfoSec Award
2023
Listed in Gartner report, Hype Cycle for Application Security
2023
Listed in Gartner report, Avoid Mobile Security Pitfalls
2023
Participated in creating the NIST Special Publication 1800-22
2023
Assigned five CVEs
2022
Presented at The ACM Conference on Computer and Communications Security (CCS)
2022
Presented at Black Hat Asia 2022
2022
Awarded CRN Mobile 100
2022
Received growth investment from USVP and Crosslink Capital
2021
Presented at USENIX Security Symposium (USENIX Security 21)
2021
Assigned five CVEs (2021)
2021
Presented at Black Hat Asia 2021
2021
Assigned two CVEs
2020
Presented at USENIX Security Symposium (USENIX Security 20)
2020
Participated in creating the NIST Special Publication 1800-21
2020
Participated in creating “Automating NIAP Requirements Testing for Mobile Apps”
2020
Assigned 147 CVEs
2019
Listed in IDC Marketscape, WorldWide Mobile App Security Testing
2019
Assigned 33 CVEs
2018
Presented at Asia Conference on Computer and Communications Security
2018
Presented at IEEE Conference on Dependable and Secure Computing (DSC)
2018
Assigned 12 CVEs
2017
Presented at Black Hat USA 2017
2017
Assigned six CVEs
2016
New York Times covered discovery of backdoor in popular prepaid mobile phone
2016
Assigned first CVE
2015
Presented at Black Hat Asia 2015
2015
Founded Kryptowire, Inc.
2011
Awarded DARPA & NIST grants
2010
Our unsurpassed mobile security intelligence
Behavioral analysis
Only mobile security solution to scan all apps, data destinations, and system configurations in context of each mobile device for actionable insights
10M+ devices protected
115k+ vulnerabilities found
2M+ apps scanned
Original research
Only researchers in the industry to discover hundreds of new zero-day vulnerabilities and threats that power proprietary app scanning engines
1000+ zero-day device vulnerabilities
350+ academic citations
230+ mobile CVEs
11 academic papers
Unmatched capabilities
Only company that can test third-party components, vendor apps, and compiled binaries without needing developer access
0 source code required
Get started today
Only mobile app risk intelligence platform that gives organizations visibility and control over mobile app threats
Our Investors
Growth investment from USVP and Crosslink
Our award-winning mobile app security technology
Our name
Quokka delivers mobile security that makes you smile.
Our namesake (pronounced kwaa-kuh) is known as the world’s happiest animal with its perpetual smile and fearless friendliness. We believe in proactive prevention and replacing the fear in mobile security with the power of peace of mind.