12 Days Of Startups: Day 11, Oversecured

Startup Name: Oversecured

Website: oversecured.com

Tell Us About Oversecured

Oversecured is a B2B mobile vulnerability scanner that scans mobile apps to find security holes before hackers do. The platform tests apps two ways: examining the code itself and running the app to see how it actually behaves. No need to hand over source code – we work with the final app file. Development teams connect our scanner to their release pipeline so every update gets checked automatically.

Why Do You Think the Sector Needed An Innovation Like This? 

Independent researchers that look for vulnerabilities in major platforms often forget about the mobile apps industry – less than 6% of their payouts involve mobile apps. Unfortunately this often means that hackers find mobile vulnerabilities months before companies do.

At the moment, 82% of Android apps and 32% of iOS apps have at least one serious security flaw sitting there. New ways to attack mobile apps appear every week, moving faster than security teams can manually test. We ranked #1 in Samsung’s vulnerability detection program. Kavak.com went from spending 8-16 hours reviewing security for each release down to about 1 hour.

How Has Oversecured Grown In 2025?

We launched runtime testing in 2025 – now we actually run the app and attack it, not just read the code. This catches problems that only appear when the app is live and talking to servers.

For every vulnerability we find, we hand developers actual attack code showing how it works. Our research exposed 7 Android and Google Pixel vulnerabilities in November 2024, and 20 security problems in Xiaomi devices in May 2024.

CNN investigated a Chinese shopping app using our findings – the app was exploiting Android flaws to spy on people. We added smart sorting that tells teams which vulnerabilities actually threaten their business versus which ones don’t matter much.

What Does Oversecured Have In Store for 2026?

Keeping pace with attackers as they invent new mobile hacking techniques – we update our checks weekly to catch the latest methods. Deepening our work with phone manufacturers, the kind of research that got us ranked #1 by Samsung.

Expanding our runtime testing to catch more problems in how mobile apps communicate with company servers – these issues only show up when the app is running, not from reading code.

For any questions, comments or features, please contact us directly.