SpartanX supports mobile application security testing for both Android and iOS. By uploading your app binaries — APK files for Android or IPA files for iOS — you make them available as testable assets within the platform, enabling both static and dynamic analysis as part of your security engagements.
Where to Upload Mobile App Binaries
Mobile app binaries are managed in the Content section, accessible via Data > Content in the left-hand navigation. This is a central store for file-based assets — separate from network-based assets like URLs and IP addresses.
Uploading a Binary
To add a mobile app binary:
Navigate to Data > Content
Drag and drop the file into the upload area, or click to browse and select it
SpartanX accepts APK files (Android) and IPA files (iOS)
Source your app binaries from your internal development team. You don't need a production-signed build — development or test builds work for security analysis.
Using Uploaded Binaries as Assets
Once uploaded, mobile app binaries appear in the Content section and become available as assets within collections. You can associate them with a specific collection and include them in engagements just like any other asset type.
Mobile assets support:
Static Application Security Testing (SAST) — analyzing the app's source code and dependencies for vulnerabilities
Dynamic Analysis (DAST) — testing the app's runtime behavior, including its API interactions
Supply chain analysis — examining third-party libraries and SDKs embedded in the binary
Uploading at Engagement Time
Alternatively, you can upload mobile app binaries directly when creating a collection or launching an engagement, without going through the Content section first. The Content section simply provides a persistent, pre-upload location for binaries that you want to use across multiple engagements.
What's Next
The next section covers SpartanX's integration ecosystem — connecting GitHub, Jira, Slack, cloud providers, and over 150 security tools to extend the platform's capabilities across your entire security stack.