---
title: "Deploy MobSF"
description: "Mobile app security scanner for Android, iOS and Windows apps"
category: "Other"
url: https://railway.com/deploy/mobsf
---

# Deploy MobSF

Mobile app security scanner for Android, iOS and Windows apps

**[Deploy MobSF on Railway](https://railway.com/template/mobsf)**

Machine-readable deploy manifest (JSON, validated by TemplateCI): https://railway.com/deploy/mobsf/manifest.json

- **Creator:** zer0person's Projects
- **Category:** Other
- **Total deploys:** 1

## Template content

### MobSF

- **Image:** opensecurity/mobile-security-framework-mobsf:latest
- **Public domain:** Yes

## Documentation

# Deploy and Host MobSF on Railway

[MobSF](https://github.com/MobSF/Mobile-Security-Framework-MobSF) (Mobile Security Framework) is an automated tool for static and dynamic analysis, malware analysis and security assessment of Android, iOS and Windows mobile apps.

## About Hosting MobSF

This template runs the official `opensecurity/mobile-security-framework-mobsf:latest` image with a persistent volume at `/home/mobsf/.MobSF`, so uploads, scan results and the database survive redeploys. The web UI is protected by a login: the username is `mobsf` and the password is generated for you and stored in the `DJANGO_SUPERUSER_PASSWORD` variable of the service (Variables tab).

## Common Use Cases

- Scan APK, AAB, IPA and APPX files for vulnerabilities and insecure settings
- Review permissions, trackers, hard-coded secrets and network behaviour of an app
- Run security checks on mobile builds from CI through the REST API

## Dependencies for MobSF Hosting

- One service with a volume; nothing else

### Deployment Dependencies

- [MobSF on GitHub](https://github.com/MobSF/Mobile-Security-Framework-MobSF)
- [Docker image](https://hub.docker.com/r/opensecurity/mobile-security-framework-mobsf)

## Why Deploy MobSF on Railway?

Railway gives you a public HTTPS URL, a persistent volume and automatic restarts with no server to maintain. After the deploy, open the URL and sign in as `mobsf` with the generated password from the service variables.


## Similar templates

- [Rocky Linux](https://railway.com/deploy/rocky-linux) — Hosted Rocky Linux 9 workspace with SSH and persistent storage. 🚀
- [Foundry Virtual Tabletop](https://railway.com/deploy/X5tR6G) — A Self-Hosted & Modern Roleplaying Platform
- [Letta Code Remote](https://railway.com/deploy/letta-code-remote) — Run a Letta Code agent 24/7. No inbound ports, just deploy.

Open this page in a browser: https://railway.com/deploy/mobsf