Boot Arguments: Specify boot arguments that will be passed to the kernel when the device is started.

Kernel Slide: Set the randomization slide value used by iOS to relocate the iOS kernel during boot in order to randomize addresses located inside the kernel. 

Pointer Authentication Code: Corellium can simulate the behavior of PAC instructions in mobile processors. You have the option to turn this feature on or leave if off.

Specify Random Seed: You can optionally specify the 64 byte hex random seed provided by iBoot to the iOS kernel, which affects things like the dyld shared cache slide.  

Enable keyboard passthrough from the web interface

General device configuration features

Enable or disable patches applied to the kernel to maximize developer convenience. Choose between Developer Kernel Patches, Stock Kernel Patches, and Completely Unpatched. 

Custom Kernel: Instead of the stock kernel, you can upload and use any compatible ARM kernel.

Kernel device configuration features

Trust Cache: Even when non-jailbroken, you can modify the code directory hashes to allow certain binaries to run even if they are not signed by Apple.

Device Tree: You can specify a custom device tree instead of using a stock device tree. 

Custom Ramdisk: You can boot the device from a custom ramdisk instead of from NAND. 

Device IDs: We randomize unique device identifiers by default, but you can optionally chance them in the device configuration. 

Other device configuration features

Manage and install apps from the UI, ADB, or IDE

Inspect network traffic with our integrated Network Monitor 

Connect to your favorite HTTP proxy / monitor (e.g. Burp, Charles Proxy)

Capture and inspect system calls with CoreTrace 

Use the dynamic code instrumentation toolkit Frida accessible from the UI (Hooking with Frida)

Save, restore, or clone your device with Device Snapshots 

Access to Kernel and Physical RAM from Userland

Other handy features

Battery (Charge level, Health, Connection Type, Status)

Environment (Temperature, Light, Pressure, Humidity)

Location (Latitude, Longitude, Altitude, Time Offset)

Motion and Position (Acceleration, Gyroscope, Magnetic, Orientation)

Configurable Sensors for Android devices

Device configuration features

Lower costs and streamline management with flexible resources

Advance your team's capabilities with leading-edge tools

Facilitate collaboration, or silo resources with fine-grained permissions

Maximize productivity by accelerating setup and resource procurement

For enterprises

Security research

Accelerate your mobile secruity work with our advanced virtual research environment.

Select from a variety of models and versions.

Device Models: iPhone 6 through iPhone 12

Choose your device

Monthly

per active CPU core
$0.25 / day / inactive device

Usage-based

Users can virtualize generic Android devices with AOSP versions 7 - 11, as well as a variety of iPhone, iPad, and iPod devices, from the iPhone 6 through the iPhone 12, with any supported version for the specified model from 10.3 through the latest.

What types of devices can I create?

Active devices are devices in the On state. They occupy both CPU cores and storage. When you turn a device Off, it becomes Stored. It will still occupy storage, but no longer occupy CPU cores. Monthly subscriptions provide a specified number of active device slots, and for each active device slot, you get 5 storage slots. Usage-based subscriptions are priced per hour per active device or per day per stored device.

What's the difference between "active" and "stored" devices?

Yes, all virtual device data is encrypted at rest, with the keys only known to the main database and, temporarily, to the particular compute node responsible for running the virtual device when it is running.

Is my device data encrypted?

When a virtual device is deleted, it is securely erased, and all device data is immediately erased in S3. Device metadata, such as the name of the device and the OS version, is stored in backups, which are regularly deleted. When a user deletes an account, all devices in that account are erased, and we only preserve analytics data restricted to account subscription and account deletion.

Can you tell me more about device and account deletion?

Frequently asked

Use device controls to pause, snapshot, or clone devices

Easily view device console, file system, apps, https traffic, and system calls

Unparalleled insight and control

Physical devices are limited. Your security research shouldn't be.
Corellium's revolutionary cloud-based research environment combines high-fidelity virtual devices with powerful integrated tools, giving you unparalleled insight, efficiency, and control to accelerate your mobile security work.

Spin up devices on demand and integrate seamlessly with your existing workflows.

Set up in no time.

Conveniently integrated tools let you analyze network traffic, explore system calls, load apps, and browse the filesystem.

Discover our built-in tools.

Our virtual devices run on ARM for accurate, reliable research.

Trust the technology you use.

Security Research

Reduce setup time with instant access to the devices you need

Offload to the cloud to keep resources free on your local machine

Eliminate the need for recompiling by testing on ARM

For individuals

Plans and pricing

What people are saying

There are now Go builders on http://build.golang.org for android/arm, android/arm64, darwin/arm64 (iOS) running on virtual @CorelliumHQ devices. Thanks to @steeve and @zenlyapp we might soon get rid of slow and unreliable physical test devices.

Go is now self hosted on iOS and Android. Meaning it doesn't need a host to compile and run programs on those platforms. What a fine job @eliasnaur and @CorelliumHQ.

Thank you @CorelliumHQ for supporting our training session with your iOS and Android virtual devices! It will be a huge help for our students at @typhooncon 10th June // Seoul "Offensive Mobile Reversing and Exploitation". For registration go to typhooncon.com/registration/

Just got my hands on @CorelliumHQ — saying that my mind is blown is an understatement. This is the future of iOS security research. (and my eternal fear of bootlooping my physical devices is gone!)  Huge thanks to @cmwdotme and @chronic!

@CorelliumHQ is easily one of the most impressive platforms I've seen. Happy to share that students attending the @BlackHatEvents @MDSecLabs Mobile Training will get to play with this first hand! blackhat.com/us-18/training... #BHUSA

Live kernel debugging on a virtualised iOS 12.0! Having the ability to do this sort of thing with whichever iPhone/version you want is gonna greatly assist developers & researchers with future iOS kernel security research.

So much this. Craziest thing for me was just having it show up as a run destination in Xcode (oh yeah and it has ssh and cycript). Real iOS virtualization in the cloud is /awesome/. Nice work @cmwdotme and team!

Watching an online virtual iPhone 8 Plus installing a copy of iOS 11.4 in a browser is *wild*. Then proxying it to USB so you can build & run directly from Xcode? @cmwdotme's @CorelliumHQ is so freaking cool.

Today, in honor of Corellium’s fourth birthday, we’re announcing the Corellium Open Security Initiative. This initiative will support independent public research into the security and privacy of mobile applications and devices through a series of awards and access to the Corellium platform.

More than any other field of computing, security depends on the existence of a large, diverse, unofficial community of researchers. While advancements in areas like hardware design often emerge from well-funded private labs, the majority of progress in cybersecurity over the last several decades has come from “the security research community,” a community that includes not only credentialed academics and corporate professionals, but hackers, dropouts, and hobbyists too. 

Conducting third-party research on mobile devices remains difficult, inefficient, and expensive. Particularly in the iOS ecosystem, testing typically requires a jailbroken physical device. Jailbreaks rely on complex exploits, and they often aren’t reliable or available for the latest device models and OS versions. 

At Corellium, we recognize the critical role independent researchers play in promoting the security and privacy of mobile devices. That’s why we’re constantly looking for ways to make third-party research on mobile devices easier and more accessible, and that’s why we’re launching the Corellium Open Security Initiative. 

As an initial pilot for this program, we will be calling for proposals on a specific topic. Over time, we will evaluate adding more topics and more opportunities for awards. If you’re interested in sponsoring or partnering with us on this initiative, please reach out to us at securityinitiative@corellium.com. 

The security research community plays a pivotal role not only in identifying and defending against security threats, but also in holding software vendors accountable for the security and privacy claims they make about their products.

Just last week, Apple announced that it would begin scanning photos uploaded into Apple’s iCloud service for Child Sexual Abuse Material (CSAM). Setting aside debates on the civil and philosophical implications of this new feature, Apple has made several privacy and security claims about this new system. These claims cover topics as diverse as image hashing technology, modern cryptographic design, code analysis, and the internal mechanics and security design of iOS itself. Errors in any component of this overall design could be used to subvert the system as a whole, and consequently violate iPhone users’ privacy and security expectations. 

Since that initial announcement, Apple has encouraged the independent security research community to validate and verify its security claims. As Apple’s SVP of Software Engineering Craig Federighi stated in an interview with the Wall Street Journal, “Security researchers are constantly able to introspect what's happening in Apple's [phone] software, so if any changes were made that were to expand the scope of this in some way—in a way that we had committed to not doing—there's verifiability, they can spot that that's happening.” 

We applaud Apple’s commitment to holding itself accountable by third-party researchers. We believe our platform is uniquely capable of supporting researchers in that effort. Our “jailbroken” virtual devices do not make use of any exploits, and instead rely on our unique hypervisor technology. This allows us to provide rooted virtual devices for dynamic security analysis almost as soon as a new version of iOS is released. In addition, our platform provides tools and capabilities not readily available with physical devices.

We hope that other mobile software vendors will follow Apple’s example in promoting independent verification of security and privacy claims. To encourage this important research, for this initial pilot of our Security Initiative, we will be accepting proposals for research projects designed to validate any security and privacy claims for any mobile software vendor, whether in the operating system or third-party applications. 

In the initial pilot of the Corellium Open Security Initiative, we will be awarding up to three qualifying submissions a $5,000 grant, to be awarded upon acceptance of the proposal, and free access to the Corellium platform for one year. 

Having a track record of security research is helpful, but not required.

Any vulnerabilities discovered in the course of your research must be reported to the vendor. We encourage you to follow the disclosure guidelines of the relevant vendor.

You must provide us with regular updates about the progress of your research. If your proposal is accepted, we will coordinate with you to set a timeline for updates, depending on the length of your project.

You must submit a final report to us providing a detailed technical explanation of the project and its outcomes. This report will be featured on our blog as part of our commitment to open access to security and privacy research. It must be submitted no later than 30 days from the end of your project, or after any disclosure requirements are met. 

Any use of the Corellium platform is governed by our Terms of Service.

Awards will be granted at our sole discretion. We will review submissions based on the following criteria:

The likely impact of the proposed research on improving mobile security or privacy.

The novelty and feasibility of the proposed research.

The likelihood that the project will be completed successfully.

The technical merits of the proposed research.

Please email your proposal to securityinitiative@corellium.com by or before 5:00pm EST October 15, 2021. 

In your proposal, please include the following details:

Name: the name(s) of the researcher(s) that will be performing the research.

Organization (if applicable): your institutional affiliation, if any.

Project Description: a detailed description of the research you intend to perform.

Impact: a detailed description of why this research is important and the impact you expect it to have on improving mobile security or privacy.

Plan and Timeline: when you expect to start the research and how long you expect it to take.

How Corellium can Help: why you would benefit from using Corellium to perform your research.

Supplemental Information: any prior research or other details that might help us review your submission.

We will review and respond to all proposals by 5:00pm EST October 31, 2021. 

If you have further questions or suggestions, or are interested in supporting our mission to improve privacy and security through independent third-party research, please feel free to reach out to us at securityinitiative@corellium.com. 

Stuff the lawyers make us say: We can’t accept proposals from individuals who are on sanctions lists or from individuals in embargoed countries. You are responsible for any taxes on applicable awards, depending on your country of residency and citizenship. Additional restrictions may apply, depending on your local law. All awards are issued entirely at our sole discretion, and we can cancel the program at any time. Your research must not violate any law.

In honor of Corellium’s fourth birthday, we’re announcing the Corellium Open Security Initiative to support independent public research into the security and privacy of mobile applications and devices.

Plans and pricing

$0.25/hour

$99/month

$295/month

$588/month

Plans and pricing

.css-1dzpi0p{font-weight:400;font-size:2.625rem;line-height:1.15;}$0.25.css-wv070u{color:var(--color-grey-500);}/hour

$99/month

$295/month

$588/month

$0.25/hour