Comment by ryhanson

I would bet that static analysis is going to be one of the top reasons. Being able to automate the process of analyzing code for leaked keys, outdated/vulnerable libraries, insecure storage, permissions, etc.

Here is an open-source tool I've used in the past to do quick static security checks on APKs: https://github.com/ajinabraham/Mobile-Security-Framework-Mob...

It also supports dynamic analysis, but I haven't used that portion of it yet.

I, too, am interested in the other enterprise tools that are built on top of this though.