NowSecure

NowSecure provides a mobile application security platform designed to assist organizations in safeguarding their data and brand reputation. The company was founded in 2009 by Andrew Hoog and Chee-Young Kim. Initially named Chicago Electronic Discovery and later viaForensics, the company rebranded to NowSecure in 2014 to reflect a shift in focus from pure forensics to broader mobile security. Hoog's journey into this field began during his time as a CIO, where a hands-on internal investigation sparked a passion for mobile forensics. This led him to dedicate himself to the venture full-time, while Kim initially managed business development in her spare time before joining full-time as the company became profitable. Hoog is a developer and cybersecurity expert with over a decade of experience, has authored two books on mobile security, and holds three related patents.

The firm's core business revolves around offering automated security testing integrated into the development lifecycle (DevSecOps), enabling clients to identify and remediate security vulnerabilities, compliance gaps, and privacy issues in their mobile applications. The business model is primarily subscription-based, with customers paying recurring fees for access to the cloud-based platform and its various service tiers. NowSecure serves enterprises and government agencies, including major banks and federal agencies, helping them manage mobile risk and accelerate application release times. Clients have reported releasing apps 30% faster while reducing both delivery costs and security risks.

The NowSecure platform delivers a comprehensive suite of solutions, including continuous static, dynamic, behavioral, and interactive security testing on real Android and iOS devices. Key offerings include Mobile Pen Testing as a Service (PTaaS), mobile supply chain monitoring, and the introduction of a Dynamic SBOM (Software Bill of Materials) for mobile apps. This technology provides detailed remediation instructions with a low rate of false positives, which increases development productivity. The company also contributes to the open-source community, sponsoring tools like Frida and Radare, and supports industry standards such as OWASP MASVS.

Keywords: mobile security, application security, DevSecOps, automated testing, cybersecurity, risk management, vulnerability assessment, mobile forensics, PTaaS, compliance