Security Research

Physical devices are limited. Your security research shouldn't be. Corellium's revolutionary cloud-based research environment combines high-fidelity virtual devices with powerful integrated tools, giving you unparalleled insight, efficiency, and control to accelerate your mobile security work.


Set up in no time. Spin up devices on demand and integrate seamlessly with your existing workflows.


Discover our built-in tools. Conveniently integrated tools let you analyze network traffic, explore system calls, load apps, and browse the filesystem.


Trust the technology you use. Our virtual devices run on ARM for accurate, reliable research.

Unparalleled insight and control

Use device controls to pause, snapshot, or clone devices
Instantly root or jailbreak devices
Easily view device console, file system, apps, https traffic, and system calls

Use device controls to pause, snapshot, or clone devices

Instantly root or jailbreak devices

Easily view device console, file system, apps, https traffic, and system calls

Security research

  • Reduce setup time with instant access to the devices you need
  • Automate your workflows with robust APIs
  • Offload to the cloud to keep resources free on your local machine
  • Eliminate the need for recompiling by testing on ARM

Committed to supporting education and nonprofit initiatives

Whether you're looking to advance your trainings or working on a project that benefits society at large, we're excited to support your work with discounts that will fit your budget.

Reach out for details

What people are saying

There are now Go builders on for android/arm, android/arm64, darwin/arm64 (iOS) running on virtual @CorelliumHQ devices. Thanks to @steeve and @zenlyapp we might soon get rid of slow and unreliable physical test devices.
eliasnaur @eliasnaur
Go is now self hosted on iOS and Android. Meaning it doesn't need a host to compile and run programs on those platforms. What a fine job @eliasnaur and @CorelliumHQ.
steeve @steeve
Thank you @CorelliumHQ for supporting our training session with your iOS and Android virtual devices! It will be a huge help for our students at @typhooncon 10th June // Seoul "Offensive Mobile Reversing and Exploitation". For registration go to
SecuriTeam_SSD @SecuriTeam_SSD
Just got my hands on @CorelliumHQ — saying that my mind is blown is an understatement. This is the future of iOS security research. (and my eternal fear of bootlooping my physical devices is gone!) Huge thanks to @cmwdotme and @chronic!
umanghere @umanghere
@CorelliumHQ is easily one of the most impressive platforms I've seen. Happy to share that students attending the @BlackHatEvents @MDSecLabs Mobile Training will get to play with this first hand! #BHUSA
domchell @domchell
Live kernel debugging on a virtualised iOS 12.0! Having the ability to do this sort of thing with whichever iPhone/version you want is gonna greatly assist developers & researchers with future iOS kernel security research.
bellis1000 @bellis1000
So much this. Craziest thing for me was just having it show up as a run destination in Xcode (oh yeah and it has ssh and cycript). Real iOS virtualization in the cloud is /awesome/. Nice work @cmwdotme and team!
b3ll @b3ll
Watching an online virtual iPhone 8 Plus installing a copy of iOS 11.4 in a browser is *wild*. Then proxying it to USB so you can build & run directly from Xcode? @cmwdotme's @CorelliumHQ is so freaking cool.
stroughtonsmith @stroughtonsmith

Plans and pricing


2 CPU cores

$99 /month

6 CPU cores

$295 /month

12 CPU cores

$588 /month


$0.25 /hour

per active CPU core
$0.20 / day / inactive device

Frequently asked

What types of devices can I create?

Users can virtualize generic Android devices with AOSP versions 7 - 11, as well as a variety of iPhone, iPad, and iPod devices, from the iPhone 6 through the iPhone 12, with any supported version for the specified model from 10.3 through the latest.

What's the difference between "active" and "stored" devices?

Active devices are devices in the On state. They occupy both CPU cores and storage. When you turn a device Off, it becomes Stored. It will still occupy storage, but no longer occupy CPU cores. Monthly subscriptions provide a specified number of active device slots, and for each active device slot, you get 5 storage slots. Usage-based subscriptions are priced per hour per active device or per day per stored device.