More than just a pretty screen

Customize your virtual device exactly the way you need it, and take your work to the next level with our handy built-in utilities.

Tools for every occasion

Our suite of tools helps you research, debug, test and explore your virtual device.


Connect to devices via XCode, Finders, or libimobile script, and to jailbroken iOS via SSH, and Android via ADB or IDE. And use your favorite HTTP proxy/monitor, like Burp or Charles Proxy.


Browse the device filesystem directly from our UI.


Manage and install apps from the UI, ADB or IDE. And the Corellium App Browser facilitates loading, removing, and running applications right in your browser.

Network Monitor

Capture and inspect the flow of HTTP/S traffic while transparently disabling certificate pinning.


Quickly browse the file system and deeply inspect the state of the device with a holistic view of system calls.


Easily connect the virtual device to standard debug tools like GDB and IDA, and run scripts, all in the pre-integrated Frida console.


View system and kernel logs in real time.

Port Forwarding

Forward ports over USB / lockdownd using iProxy.


Pause, save, restore, and clone device states.


Send messages to your virtual device.

Configurable Sensors

Configure your device’s peripherals and sensors.


Charge level, Health, Connection Type and Status.


Temperature, Light, Pressure and Humidity.

mobile device with pins on sensors


Latitude, Longitude, Altitude and Time Offset.

Motion and Position

Acceleration, Gyroscope, Magnetic and Orientation.

mobile device with pins on sensors

Your device, your kernel

Get the most out of your virtual devices with advanced configuration.

Kernel Patches

Enable or disable patches applied to the kernel to maximize developer convenience.

Boot Arguments

Specify boot arguments that will be passed to the kernel when the device is started.

Kernel Slide

Set the randomization slide value used by iOS to relocate the iOS kernel during boot in order to randomize addresses located inside the kernel.

Random Seed

You can optionally specify the 64 byte hex random seed provided by iBoot to the iOS kernel, which affects things like the dyld shared cache slide.

Pointer Authentication Code

Corellium can simulate the behavior of PAC instructions in mobile processors. You have the option to turn this feature on or leave if off.

Device IDs

We randomize unique device identifiers by default, but you can optionally chance them in the device configuration.

Trust Cache

Even when non-jailbroken, you can modify the code directory hashes to allow certain binaries to run even if they are not signed by Apple.

Extra Access

Enable keyboard passthrough from the web interface, as well as kalloc / kfree trace access via GDB.

Custom Kernel

Instead of the stock kernel, you can upload and use any compatible Arm kernel.

Device Tree

You can specify a custom device tree instead of using a stock device tree.


You can boot the device from a custom ramdisk instead of from NAND.

Powerful features for the power user

Features only available on our Enterprise and Premium licenses.

Kernel Debugging

Instead of the stock kernel, you can upload and use any compatible Arm kernel.

Enterprise On-Site

Projects and Teams

Assign a certain number of cores to a project, and then assign certain users and/or teams to that project.

Enterprise On-Site

iBoot Support

Instead of booting the device directly from the kernel, the application processor can be started from iBoot.

Premium On-Site

SEP Support

Instead of protocol-level SEP emulation, SEP firmware can be run in an emulator. You can also patch SEPOS to print debug messages to console.

Premium On-Site