CheckOps home

Tools directory

C

CheckOps

Corellium

Corellium is a commercial virtual hardware platform, now part of Cellebrite, that provides virtualised iOS and Android devices and Arm-based IoT and automotive systems for mobile app security testing, DevOps and research.

Visit website

Latest public signals

Not refreshed yet. Refresh reads the public site and, when the entry has a GitHub repository, the latest release.

Visit Website

Introduction

Corellium is a virtual hardware company whose platform virtualises Arm-based devices. Its website organises solutions around mobile app pentesting (app security testing and reporting), mobile app DevOps (continuous security testing across the SDLC), IoT device DevOps, Arm virtual hardware for software-hardware co-design, and industry offerings for enterprises, government, automotive and education.

Named products include Corellium Viper, a business solution for mobile app security testing, and MATRIX technology for mobile app testing and reporting automation. Virtual devices give security researchers and testers capabilities that are hard to obtain on physical phones, such as deep inspection and instrumentation, which is why Corellium is widely associated with mobile security research. Corellium is now part of Cellebrite, and its trial and pricing links lead to Cellebrite’s site; pricing is not published there, so contact sales. Free trials are offered through the website.

Features

  1. Virtual iOS and Android: Arm-based virtual devices.
  2. Security testing focus: Pentesting, reporting and continuous security.
  3. Automation: MATRIX for test and report automation.
  4. Beyond mobile: IoT, automotive and Arm virtual hardware.

Pros

  1. Unique capabilities: Deep inspection on virtual devices.
  2. Free trial: Trial available via the website.

Cons

  1. Commercial and specialised: Pricing via sales; see site.
  2. Security-oriented: Less focused on everyday functional UI testing than device clouds.

Typical use (see Corellium documentation):

  1. Start a trial and create a virtual iOS or Android device in the Corellium web console or via its API.
  2. Install the app under test and connect tools such as debuggers, proxies or instrumentation frameworks.
  3. Run security assessments or automated MATRIX checks and export reports.
  4. Integrate device provisioning and tests into CI through the API.

Resources:

Pricing

Commercial; pricing is not published (trial and pricing links lead to Cellebrite). Free trial available; see site.

  1. Mobile security teams and pentesters.
  2. Enterprises adding continuous mobile app security testing.

Conclusion

Corellium is a specialised virtual device platform best suited to mobile security testing and research.

Compare

CheckOps pages that put Corellium next to related tools. There is no paid placement on these lists.

Alternatives

Other tools on CheckOps that cover similar ground. Open a page, or compare one with Corellium side by side.