Hands-on mobile security training.

Give your team the skills to analyze mobile apps and find their vulnerabilities. Learn from specialists who do this work every day.

Discuss your training needs Services for security teams

When a new project calls for new skills.

For security teams and consultancies that test mobile apps, or plan to.

Every mobile project is different, and some need experience your team has not had the chance to gain yet.

When that happens, you either turn the project down and lose the revenue, or take it on without being sure you can deliver what your client expects.

The same applies if you are starting to offer mobile security: your team needs a solid base before their first projects.

What we teach.

Depending on your goals, training can cover:

Mobile app analysis: look inside app packages, their code and how they use the operating system.
Reverse engineering: understand what an app does, and find the parts that matter for security.
Dynamic analysis: watch and change how an app behaves while it runs.
App protections: how RASP, anti-tampering and root detection work, and how to test them.

How we work.

Skills checklist: your team fills in a checklist of what they already know, and we recommend what to focus on.
Proposal: based on the checklist, we agree the topics, platforms, level, group size and format, online or onsite, and send you a proposal.
Preparation: we prepare the agenda, exercises and environment, and tell participants what they need beforehand.
Hands-on sessions: your team works through practical exercises with help from our specialists.
Your own projects: we set aside time to talk about how to apply what they learned to your team's work.

What your team gets.

An agreed agenda

Topics and level based on your team's checklist, so no time goes into what they already know.

Guided exercises

Practical work, not just demonstrations.

A prepared environment

The tools and setup for the exercises, ready before the training starts.

Knowledge you can reuse

Techniques your team can apply with the tools they already use.

Why vulnit for training.

We do this work every day

Our team works on mobile vulnerability research, reverse engineering and security evaluations. We teach what we use in our own projects and research.

Recognized by OWASP

vulnit is an OWASP MAS Advocate, for our contributions to OWASP Mobile Application Security, the main reference for testing mobile apps.

Techniques, not tools

We teach how things work, not which buttons to press. Your team can apply it with any tool.

Meet the team

Mobile security training FAQs.

Who is this training for?

Security testers, application security teams and researchers who test mobile apps, and companies starting to offer mobile security. The skills checklist helps us set the right level for your team.

What experience do participants need?

It depends on the topics. Reverse engineering and dynamic analysis usually need some programming and basic security testing experience. We tell you what participants need before the training.

Does the training cover Android and iOS?

Yes. We can focus the training on Android, iOS or both.

Which tools do you use?

By default, well-known tools such as Ghidra, Frida or Binary Ninja. The goal is not to learn a specific tool, but techniques your team can use with any tool.

Is the training online or onsite?

Both. We can run the training online or at your offices.

How are the duration and price agreed?

They depend on the topics, your team's experience, group size, format (online or onsite) and preparation needed. Tell us your goals and preferred dates, and we will send you a proposal.

Ready to train your team?

Tell us about your team and the projects they work on. We reply within one business day to arrange a call.

Discuss your training needs