NowSecure

NowSecure has steadily expanded its platform over the years, adding NIAP v1.3 automated vetting (2020), GovAppDB, and a threat assessment service tied to newer federal mobile security mandates, showing a consistent if not explosive pace of feature development.

Operating continuously since 2009 with roughly 100 employees, NowSecure runs a mature automated testing platform integrated into DevSecOps pipelines and has sustained real federal government program work (an SBIR partnership with the U.S. Air Force's BESPIN team), indicating genuine operational depth for a company of its size.

The company's most recent disclosed funding is a $20M Series B; no larger or more recent round was found in public sources, and while continued federal contract relevance is a positive signal, there is no clear evidence of accelerating growth beyond steady, sustained operation.

Automating mobile app security testing to run inside CI/CD pipelines rather than as periodic manual penetration tests is a meaningful efficiency gain, but NowSecure competes with several other established mobile application security testing (MAST) vendors making similar automation claims, so it is a strong execution of an established idea rather than a novel one.

NowSecure's efficacy claims are unusually well substantiated for this category: it built the first automated testing solution supporting the NIAP v1.3 Mobile App Vetting Protection Profile, originating from a U.S. Air Force SBIR partnership, and independent reporting (Potomac Officers Club) confirms DoD adoption of that specific capability, which is a genuine third-party-verifiable proof point beyond vendor marketing.

Mobile apps are a growing and often under-tested part of the enterprise and government attack surface, and newer federal mandates around mobile security and privacy (which NowSecure built a dedicated GovAppDB and threat assessment service to address) make automated, standards-aligned mobile app testing directly relevant to current compliance pressures.