Exfault

Exfault provides autonomous security testing for Android applications by deploying AI agents in cloud emulators. The platform combines static and dynamic analysis to identify vulnerabilities, even within authenticated user flows. It generates reproducible security findings to help teams secure their mobile applications efficiently. Exfault combines static and dynamic analysis with AI agents using tools like adb,jadx, apktool for static analysis and reverse engineering, frida for dynamic analysis, hermes-dec for React native decompilation. The AI agents have access to real Android emulators to peform navigation, explore functionality and validate vulnerabilities before reporting them, improving both the quality of reports and also the rate of false positives. Instead of uploading an apk or aab, you can simply enter an Android package name (com.example.app), Our backend automatically acquires a compatible build, installs it in an emulator so the agents can test your app. For authenticated testing, you can provide test credentials and the agent will automatically sign in and continue exploring the authenticated attack surface. We are also working on a human-in-the-loop login helper for more complex authentication flows involving MFA, Email verification etc.