Corellium
Virtual iOS, Android, and ARM devices with instant root access for security testing and research.
Technical Architecture & Overview
Corellium virtualizes ARM hardware to run iOS and Android as virtual devices, with built-in root access and snapshot, clone, and share functions. It targets mobile app pentesting, vulnerability research, malware analysis, and continuous testing, and supports new iOS versions typically within days of release, including betas. Falcon, Viper, and Atlas are annual subscriptions invoiced to the business, and Solo, a limited education version for students, is a monthly subscription. Cellebrite completed its acquisition of Corellium in December 2025.
Targeted Technical Use Cases
Scaling mobile security testing beyond scarce jailbroken physical devices.
Evaluation & Trade-offs
Core Strengths
- +Arm-on-arm virtualization rather than emulation.
- +Snapshot and restore makes test runs reproducible.
- +Supports current iOS versions without device acquisitions.
Trade-Offs & Limitations
- -Business editions are annual subscriptions arranged through sales.
- -Virtual iOS devices lack GPU (Metal) support and cellular, NFC, and Bluetooth peripherals, so hardware-dependent behavior still needs physical device checks.
Defensive Security Application
Repeatable dynamic analysis of mobile apps for data protection and hardening verification.
Frequently Asked Questions
What is Corellium?→
Corellium virtualizes ARM hardware to run iOS and Android as virtual devices, with built-in root access and snapshot, clone, and share functions. It targets mobile app pentesting, vulnerability research, malware analysis, and continuous testing, and supports new iOS versions typically within days of release, including betas. Falcon, Viper, and Atlas are annual subscriptions invoiced to the business, and Solo, a limited education version for students, is a monthly subscription. Cellebrite completed its acquisition of Corellium in December 2025.
What is Corellium used for?→
Scaling mobile security testing beyond scarce jailbroken physical devices.
What are the strengths of Corellium?→
- +Arm-on-arm virtualization rather than emulation.
- +Snapshot and restore makes test runs reproducible.
- +Supports current iOS versions without device acquisitions.
What are the limitations of Corellium?→
- +Business editions are annual subscriptions arranged through sales.
- +Virtual iOS devices lack GPU (Metal) support and cellular, NFC, and Bluetooth peripherals, so hardware-dependent behavior still needs physical device checks.
How is Corellium used defensively?→
Repeatable dynamic analysis of mobile apps for data protection and hardening verification.