NowSecure announced the launch of AI-Navigator, a new AI-powered testing capability integrated into the NowSecure Platform that automates authenticated Dynamic Application Security Testing (DAST) for mobile applications. Designed to address longstanding challenges with authenticated security testing, AI-Navigator accelerates mobile app risk assessment, expands coverage behind login, and empowers AppSec and DevSecOps teams to scale mobile security with higher accuracy and efficiency.
As mobile development accelerates and applications grow more complex, traditional security testing methods struggle to consistently assess authenticated workflows, which often conceal critical vulnerabilities, data leaks, and supply-chain risks. Dynamic testing enables security teams to observe real-world app behavior at runtime, but authentication barriers such as evolving user interfaces, business logic, and changing access credentials create friction and drive reliance on static testing tools that cannot uncover deeper risks. AI-Navigator addresses these challenges by combining advanced AI automation with NowSecure’s proven real-device dynamic testing platform, enabling fast, scriptless authenticated testing from login to logout.
“Mobile apps are the front door to enterprise and consumer data, but traditional security testing has struggled to effectively test what happens after login — where the most critical vulnerabilities often hide,” said David Weinstein CTO NowSecure.
AI-Navigator applies adaptive AI in real time to interpret and navigate mobile app user interfaces, starting with login sequences, and automatically guiding the app into an authenticated state. By eliminating brittle scripting and manual configuration, the new capability reduces authenticated testing setup and execution time by more than 90 percent, turning a process that traditionally took days into minutes and enabling teams to consistently reach post-login areas of mobile applications.
Also Read: Guidepoint Launches Guidepoint360 Mobile App, Delivering AI-Driven Research Whenever It’s Needed
With AI-Navigator, security teams can:
-
Accelerate Testing Workflows: Begin authenticated testing quickly without manual scripting, enabling rapid setup and immediate use across app portfolios.
-
Maintain Reliable Navigation: Automatically adapt to changing user interfaces and business logic across app versions to ensure continuous authenticated coverage.
-
Expand Test Coverage: Assess deeper app functionality behind authentication, including sensitive data flows, privileged features, APIs, and third-party SDKs that unauthenticated scans often overlook.
-
Enhance AppSec Efficiency: Free analysts from repetitive configuration tasks, enabling more frequent and comprehensive testing within DevSecOps pipelines.
-
Strengthen Risk Reduction: Identify vulnerabilities, logic flaws, and privacy exposures that traditional scanning methods often miss.
AI-Navigator is designed with a privacy-first approach, keeping authentication workflows, credentials, and testing data fully within the NowSecure environment. The AI uses only non-sensitive visual and structural user interface elements in real time to navigate the app, ensuring data remains secure, controllable, and auditable for compliance requirements.
Available now as an integrated enhancement to the NowSecure Mobile Application Risk Management (MARM) platform for Android applications, AI-Navigator will soon support iOS devices. Security teams simply input credentials through the NowSecure interface to initiate authenticated scans as part of their ongoing application security programs.
SOURCE: NowSecure