Deploy and Host MobSF on Railway

MobSF (Mobile Security Framework) is an automated tool for static and dynamic analysis, malware analysis and security assessment of Android, iOS and Windows mobile apps.

About Hosting MobSF

This template runs the official opensecurity/mobile-security-framework-mobsf:latest image with a persistent volume at /home/mobsf/.MobSF, so uploads, scan results and the database survive redeploys. The web UI is protected by a login: the username is mobsf and the password is generated for you and stored in the DJANGO_SUPERUSER_PASSWORD variable of the service (Variables tab).

Common Use Cases

Scan APK, AAB, IPA and APPX files for vulnerabilities and insecure settings
Review permissions, trackers, hard-coded secrets and network behaviour of an app
Run security checks on mobile builds from CI through the REST API

Dependencies for MobSF Hosting

One service with a volume; nothing else

Deployment Dependencies

Why Deploy MobSF on Railway?

Railway gives you a public HTTPS URL, a persistent volume and automatic restarts with no server to maintain. After the deploy, open the URL and sign in as mobsf with the generated password from the service variables.