NowSecure Academy: Build Your Mobile App Security Skills

Reset

Level Up Your Mobile AppSec Skills

Learn about the latest best practices for secure mobile app development, mobile pen testing, reverse engineering and more with free courses, enterprise training and industry-recognized certifications.

Sign up for Free Learn More

coworkers looking at desktop computer

More ways to learn

Code Quality & Build Settings

Advance your knowledge of code quality and build settings for mobile apps.

Not currently available

Security analyst Certificate learning path Paid

Data Storage and Privacy

Advance your knowledge of mobile app security standards and risk assessments.

Not currently available

Security analyst Certificate learning path Paid

Welcome to Mobile Application Security Professional Certificate Learning Path

Welcome to our course on mobile app security.

Security analyst Certificate learning path Free

Hacker101: Mobile Hacking

Get introduced to mobile app hacking.

Developer Online course Free Hacking

Web versus Mobile AppSec Testing

Overview of mobile application security testing versus web application security testing.

Security analyst Online course Free Mobile AppSec Testing

Introduction to Secure Mobile Development

Learn the basics with our intro course to secure mobile development.

Developer Online course Free Fundamentals

Hacker101: iOS Hacking

Learn about iOS hacking in an hour.

Developer Online course Free Hacking

Mobile Application Security Professional

Earn your mobile application security professional certificate from our experts!

Security analyst Certificate learning path Paid

Platform Features & Interaction

Advance your knowledge of platform features and interactions for mobile apps.

Not currently available

Developer Online course Paid Platform Features

Hacker101: Android Hacking

Learn about Android hacking.

Developer Online course Free Hacking

iOS Reverse Engineering with Frida

Learn how to use Frida as an essential tool in iOS reverse engineering.

Developer Online course Free FRIDA

The Frida HandBook

Learn about binary instrumentation with the Frida toolkit.

Developer Online course Free FRIDA

Mobile Application Security Foundations

Want to upskill with mobile app security? Start building your foundation here.

[separator] Hacking

Next, we recommend:

[separator] Introductory Developer Course

We suggest you begin with the below introductory course:

Hardcoded Keys, Passwords and URLs

Learn remediation techniques for preventing the use of hardcoded values in your mobile app.

Security analyst Developer Online course Free Vulnerabilities

Cracking Fun with Frida & Radare

Watch the creators of Frida and Radare reverse engineer and manipulate an IoT app.

Developer Online course Free FRIDA Radare

[separator] Tools

Lastly, we recommend:

Lack of Certificate Validation

Learn remediation techniques for verifying certificate validation in your mobile app.

Security analyst Developer Online course Free Vulnerabilities

Man-in-the-middle (MITM) Attack Demo

Watch a MITM attack demo using Addressed Resolution Protocol (ARP) spoofing.

Security analyst Developer Online course Free Vulnerabilities Exploit

[separator] Introductory Security Courses

We suggest you begin with the below introductory courses:

OWASP Mobile versus Web Standards

Understand the differences between the OWASP mobile versus web standards.

Security analyst Online course Free OWASP Standards Based Testing

Static Application Security Testing (SAST)

Learn about static application security testing (SAST).

Security analyst Online course Free Mobile AppSec Testing Standards Based Testing

Mobile AppSec 101

Expand your knowledge of mobile app security testing.

Not currently available

Security analyst Free Fundamentals

Dynamic Application Security Testing (DAST)

Learn about dynamic application security testing (DAST).

Security analyst Online course Free Mobile AppSec Testing Standards Based Testing

Resources and Terminology

Learn secure mobile development terminology and resources.

Google Play Data Safety and ADA MASA

Understand the Google Play data safety section and ADA MASA.

Security analyst Developer Online course Free ADA/ Google

Web versus Mobile Apps

Understand the differences between web and mobile apps.

Security analyst Online course Free Mobile AppSec Testing

Learn remediation techniques for preventing the use of HTTP requests in your mobile app.

Security analyst Developer Online course Free Vulnerabilities

OWASP Standards

Learn the OWASP standards for secure mobile development.

Lack of Hostname Verification

Learn remediation techniques for verifying hostname verification in your mobile app.

Security analyst Developer Online course Free Vulnerabilities

Interactive Application Security Testing (IAST)

Learn about interactive application security testing (IAST).

Security analyst Online course Free Mobile AppSec Testing Standards Based Testing

OWASP MAS Updates

Learn more about the OWASP MAS Updates.

Tech Talk Free OWASP

OWASP Mobile Application Security (MAS) Updates

Learn what's new with OWASP Mobile Application Security (MAS).

Security analyst Tech Talk Free OWASP Standards Based Testing

Architecture and Analysis

Learn more about iOS and Android architecture, stacks, and sandboxing.

Not currently available

Security analyst Online course Free Fundamentals

Lab, Tools and Process

Learn more about mobile app security lab setup, tools and processes for pentesting.

Not currently available

Security analyst Online course Free Pentesting

Standards and Risk Assessment

Advance your knowledge of mobile app security standards and risk assessments.

Not currently available

Security analyst Online course Free Vulnerabilities

Intro to Mobile Application Security

Want to upskill with mobile app security? Start building your foundation here.

Not currently available

Security analyst Online course Free Fundamentals

Network Communication

Advance your knowledge of authentication and session management processes for mobile apps.

Not currently available

Certificate learning path Paid Analyst

MITRE ATT&CK and MITRE Mobile ATT&CK

Understand the differences between MITRE ATT&CK and MITRE Mobile ATT&CK.

Security analyst Online course Free Mobile AppSec Testing

OWASP Mobile Application Security Project

Get introduced to the OWASP MAS Project, MASVS and MASTG.

Security analyst Online course Free OWASP Standards Based Testing

Frida Certificate Learning Series

Earn your Frida Learning Series certificate from our experts!

Certificate learning path Paid FRIDA

Secure Mobile Development Professional

Earn your secure mobile development certificate from our experts!

Developer Certificate learning path Paid

Shifting Left into the Mind of the Developer

Learn to how to accelerate programs and pipelines.

[separator] Testing Types

Lastly, we recommend:

[separator] Standards and OWASP

Next, we recommend:

Powering Higher Team Productivity in Your Mobile Pipelines

Learn how to drive higher productivity from your existing team.

[separator] Testing

Next, we recommend:

Continuous Testing: A Winning Strategy for Releasing 5-Star Mobile Apps

Learn more about continuous testing that top mobile app devs.

Accelerating DevOps with Autonomous Security Observability

Learn about security observability.

Advance your knowledge of mobile app security standards and risk assessments.

Not currently available

Security analyst Certificate learning path Paid

[separator] Secure Coding

Next, we recommend:

Navigating the Pitfalls of AI-Generated Code: Security Best Practices

Learn more about the pitfalls of AI generated code and security best practices.

Tech Talk Free AI

Optimizing Security Velocity in your DevSecOps Pipeline at Scale

Learn about security optimization for your pipeline.

Secure Mobile Development Foundations

Want to upskill with secure mobile development? Start building your foundation here.

Developer Certificate learning path Free

iOS 18 Security Updates

Learn about the new security updates for iOS 18.

Free Security Mobile OS Update Watch

Introduction to Frida

Get an introduction to Frida concepts and learn how to install on your device.

Identifying Mobile App Risk with Progressive Testing through PTaaS

Learn more about PTaaS.

Leveling the Playing Field: Apple and Android Security in the Wake of the DMA

Learn more about Apple and Android Security in the Wake of the DMA.

Tech Talk Free Security

Securing IoT - Blueprint to Bluetooth LE Security

Learn how to secure Bluetooth LE-connected mobile apps.

Security analyst Tech Talk Free Vulnerabilities

Integrating Security into the Software Development Lifecycle

Learn to about the importance of security integrations.

MASVS Team Up: Bulletproof Mobile Security from Dev through Prod

Learn tools to ensure bulletproof mobile security.

The Threat Modeling Manifesto in a Mobile First World

Learn about the threat modeling manifesto.

Introduction to Mobile DevSecOps & Threat Modeling

Advance your knowledge with our intro course to mobile app security.

Not currently available

Security analyst Certificate learning path Paid

How Mobile App Data at Rest Gets Attacked

Learn how to secure data storage for mobile apps.

Security analyst Tech Talk Free Data Storage

Using Frida for Continuity on iOS

Learn how to use Continuity on iOS and Frida to parse Bluetooth messages.

Security analyst Developer Online course Tech Talk FRIDA

OWASP MASVS V2 Updates

Learn more about OWASP MASVS V2

Tech Talk Free OWASP

Advance your knowledge of mobile app cryptographic processes.

Not currently available

Developer Online course Paid Cryptography

Authentication & Session Management

Advance your knowledge of authentication and session management processes for mobile apps.

Not currently available

Security analyst Certificate learning path Paid

Advance your knowledge of mobile app cryptographic processes.

Not currently available

Security analyst Certificate learning path Paid

Cryptography 101

Learn about cryptography foundations.

Free Cryptography

Mobile Application Security Foundations

Want to upskill with mobile app security? Start building your foundation here.

Security analyst Certificate learning path Free

Advance your knowledge of resiliency and reverse engineering in mobile apps.

Not currently available

Security analyst Certificate learning path Paid

Platform Interaction

Advance your knowledge of platform interactions for mobile apps.

Not currently available

Security analyst Certificate learning path Paid

Authentication & Session Management

Advance your knowledge of authentication and session management processes for mobile apps.

Not currently available

Developer Online course Paid Authentication

Data Storage & Privacy Techniques

Advance your knowledge of data storage locations and privacy techniques.

Not currently available

Developer Online course Paid Data Storage

OWASP MASVS & MSTG Updates

Learn what’s new and what’s next for the OWASP MSTG and the MASVS standard from a project lead.

Security analyst Tech Talk Free OWASP Standards Based Testing

Pentesting Roku Applications

Learn about pentesting Roku apps

Your Mobile App as a Spying Device

Protect your mobile application from becoming a spying device.

Security analyst Developer Tech Talk Free Vulnerabilities

Mobile Application 3rd Party Analytics – A Balancing Act Between Organizations and Consumer Privacy

Learn more about mobile app analytics

Crash Course in Getting Started with Mobile App Pentesting

Learn what it takes to pentest mobile apps.

Security analyst Tech Talk Free Pentesting

Managing and Securing Third-party Dependencies in Mobile Apps

Ensure the security and license compliance of your dependency tree.

Security analyst Developer Tech Talk Free Vulnerabilities

Mobile App Bug Bounties

Get an insider’s view of the world of mobile app bug bounty hunters.

Security analyst Developer Tech Talk Free Vulnerabilities

Navigating Mobile AppSec Challenges with People and Automation

Learn more on navigating challenges in mobile appsec.

Be Aware & Prepare: Independent Security Reviews Build User Trust

Learn more about independent security

Riding to Remote Code Execution: Peloton Bike Use Case

Take a technical deep dive into uncovering and exploiting vulnerability CVE-2021-0326 on an unpatched Android tablet.

Security analyst Developer Tech Talk Free Vulnerabilities Exploit

Beating the r2 Learning Curve

Learn more about what Radare is and what can it do for you.

Tech Talk Radare

Weak Cryptography

Learn remediation techniques for preventing the use of weak cryptography in your mobile app.

Security analyst Developer Online course Free Cryptography Vulnerabilities

Secure Network Communications

Advance your knowledge of secure network communications for mobile apps.

Not currently available

Developer Online course Paid Vulnerabilities

Code Quality & Build Settings

Advance your knowledge of code quality and build settings for mobile apps.

Not currently available

Developer Online course Paid Vulnerabilities

Defense-in-Depth

Advance your knowledge of defense-in-depth for mobile apps.

Not currently available

Developer Online course Paid Vulnerabilities

How to Build a Simple Mobile App With GitHub Copilot

Learn more about the power of AI copilots.

Tech Talk Free Fundamentals AI

Securing Your Mobile App Ecosystem - Most Common Mobile App Risks

Learn more about securing your mobile app ecosystem.

Detecting a Vulnerable Version of OpenSSL in Mobile Apps

Learn how to detect vulnerable versions in your app.

Security analyst Tech Talk Free Vulnerabilities Vulnerability Spotlight

Adventures in Exploiting WebViews for Android Attacks

Learn more about exploiting WebViews for attacks.

Black Hat + DefCon + SquadCon - RoadTrip Roundup

Learn more about topics discussed at several recent conferences.

New apps, new tech require scalable vetting of 3rd party mobile apps

Assess the risk of the third-party apps that are in use in your enterprise.

App Defense Alliance (ADA) Mobile Application Security Assessment

Learn about the App Defense Alliance and the Mobile Application Security Assessment.

Security analyst Developer Tech Talk Free ADA/ Google

MITRE ATT&CK for Mobile

Learn more about ATT&CK for Mobile from MITRE.

Tech Talk Free Vulnerabilities

Privacy Risk in Your Pocket: Rethinking Mobile Privacy in the Age of Constant Connection

Rethink the privacy risks of mobile apps and learn how to adapt mobile strategies for a privacy-first world.

AI in Mobile Apps: Hidden Risks, and Compliance Pitfalls and How to Mitigate Them

Learn about the risk of AI use in mobile applications.

Intro to Game Hacking with Frida

Learn how to hack a gaming app using Frida.

Tech Talk Free Hacking FRIDA

Analyzing Device Security With the OWASP IoT Security Testing Guide

Learn more about the OWASP IoT Security Testing Guide (ISTG) project.

Security Best Practices When Using AI To Write Code

Learn more about AI best practices for writing code

Tech Talk Free AI

Where Mobile Meets Medical

Learn more about mobile appsec as it relates to the medical industry.

Mobile Application Security Professional Exam

Test your knowledge on mobile app security.

Conclusion to Mobile App Security

Learn about the final exam and certificate, OWASP MASVS Refactoring and the NowSecure Community.

Not currently available

Security analyst Certificate learning path Paid

Welcome to the Secure Mobile Development Professional Certificate Learning Path

Welcome to our course on mobile app development.

Not currently available

Intro to Secure Mobile Development

Learn the basics with our intro course to secure mobile development.

Mobile App Attack Surface

Learn about mobile app attack surface.

Learn the basics about OWASP MASVS.

Frida's Internal Tools

Frida comes packaged with some useful tools. Learn how to use them!

Not currently available

Scripting for Frida on Android

The first introduction into writing Frida scripts for the Android platform.

Not currently available

Android WebViews

Learn about Android WebViews and how to use Frida to aid in your analysis.

Not currently available

Scripting for Frida on Android (Continued)

Continue learning about Frida scripting for Android, this time for native functions.

Not currently available

Authentication & Session Management

Advance your knowledge of authentication and session management processes for mobile apps.

Not currently available

Security analyst Certificate learning path Paid

Mobile Application Security Professional Exam

Test your knowledge on mobile app security.

Advance your knowledge of mobile app security standards and risk assessments.

Not currently available

Security analyst Certificate learning path Paid

Code Quality & Build Settings

Advance your knowledge of code quality and build settings for mobile apps.

Not currently available

Security analyst Certificate learning path Paid

Advance your knowledge of mobile app cryptographic processes.

Not currently available

Security analyst Certificate learning path Paid

Network Communication

Advance your knowledge of authentication and session management processes for mobile apps.

Not currently available

Certificate learning path Paid Analyst

Welcome to Mobile Application Security Professional Certificate Learning Path

Welcome to our course on mobile app security.

Security analyst Certificate learning path Free

Advance your knowledge of resiliency and reverse engineering in mobile apps.

Not currently available

Security analyst Certificate learning path Paid

Platform Interaction

Advance your knowledge of platform interactions for mobile apps.

Not currently available

Security analyst Certificate learning path Paid

Introduction to Mobile DevSecOps & Threat Modeling

Advance your knowledge with our intro course to mobile app security.

Not currently available

Security analyst Certificate learning path Paid

Conclusion to Mobile App Security

Learn about the final exam and certificate, OWASP MASVS Refactoring and the NowSecure Community.

Not currently available

Security analyst Certificate learning path Paid

Data Storage and Privacy

Advance your knowledge of mobile app security standards and risk assessments.

Not currently available

Security analyst Certificate learning path Paid

Platform Features & Interaction

Advance your knowledge of platform features and interactions for mobile apps.

Not currently available

Developer Online course Paid Platform Features

Advance your knowledge of mobile app cryptographic processes.

Not currently available

Developer Online course Paid Cryptography

Data Storage & Privacy Techniques

Advance your knowledge of data storage locations and privacy techniques.

Not currently available

Developer Online course Paid Data Storage

Secure Network Communications

Advance your knowledge of secure network communications for mobile apps.

Not currently available

Developer Online course Paid Vulnerabilities

Code Quality & Build Settings

Advance your knowledge of code quality and build settings for mobile apps.

Not currently available

Developer Online course Paid Vulnerabilities

Defense-in-Depth

Advance your knowledge of defense-in-depth for mobile apps.

Not currently available

Developer Online course Paid Vulnerabilities

Welcome to the Secure Mobile Development Professional Certificate Learning Path

Welcome to our course on mobile app development.

Not currently available

Authentication & Session Management

Advance your knowledge of authentication and session management processes for mobile apps.

Not currently available

Developer Online course Paid Authentication

Intro to Secure Mobile Development

Learn the basics with our intro course to secure mobile development.

Mobile App Attack Surface

Learn about mobile app attack surface.

Learn the basics about OWASP MASVS.

Frida's Internal Tools

Frida comes packaged with some useful tools. Learn how to use them!

Not currently available

Scripting for Frida on Android

The first introduction into writing Frida scripts for the Android platform.

Not currently available

Introduction to Frida

Get an introduction to Frida concepts and learn how to install on your device.

Android WebViews

Learn about Android WebViews and how to use Frida to aid in your analysis.

Not currently available

Scripting for Frida on Android (Continued)

Continue learning about Frida scripting for Android, this time for native functions.

Not currently available

Architecture and Analysis

Learn more about iOS and Android architecture, stacks, and sandboxing.

Not currently available

Security analyst Online course Free Fundamentals

Standards and Risk Assessment

Advance your knowledge of mobile app security standards and risk assessments.

Not currently available

Security analyst Online course Free Vulnerabilities

Intro to Mobile Application Security

Want to upskill with mobile app security? Start building your foundation here.

Not currently available

Security analyst Online course Free Fundamentals

Lab, Tools and Process

Learn more about mobile app security lab setup, tools and processes for pentesting.

Not currently available

Security analyst Online course Free Pentesting

Mobile Application Security Professional Exam

Test your knowledge on mobile app security.

Conclusion to Mobile App Security

Learn about the final exam and certificate, OWASP MASVS Refactoring and the NowSecure Community.

Not currently available

Security analyst Certificate learning path Paid

Welcome to the Secure Mobile Development Professional Certificate Learning Path

Welcome to our course on mobile app development.

Not currently available

Intro to Secure Mobile Development

Learn the basics with our intro course to secure mobile development.

Mobile App Attack Surface

Learn about mobile app attack surface.

Learn the basics about OWASP MASVS.

Frida's Internal Tools

Frida comes packaged with some useful tools. Learn how to use them!

Not currently available

Scripting for Frida on Android

The first introduction into writing Frida scripts for the Android platform.

Not currently available

Android WebViews

Learn about Android WebViews and how to use Frida to aid in your analysis.

Not currently available

Scripting for Frida on Android (Continued)

Continue learning about Frida scripting for Android, this time for native functions.

Not currently available