head to head · open source
Mobile-Security-Framework-MobSF vs hurl
Mobile-Security-Framework-MobSF has 22,109 GitHub stars, 3,800 forks, 31 open issues and last shipped 2 days ago. hurl has 19,296 stars, 752 forks, 201 open issues and last shipped today. Mobile-Security-Framework-MobSF leads on adoption by 15% (22,109 vs 19,296 stars). Mobile-Security-Framework-MobSF is written in Python under GPL-3.0; hurl is written in Rust under Apache-2.0. Mobile-Security-Framework-MobSF has attracted 17% as many forks as stars, hurl 4%. hurl was the more recently maintained of the two, and both are self-hostable with no licence fee. The two share 1 topic tag (api-testing), so they are genuine substitutes rather than adjacent tools.
Two open source projects, one decision. Both are free and self-hostable — the differences are community size, license terms, language stack and release pace.
← all 20902 open source comparisons
Side by side
| Mobile-Security-Framework-MobSF | hurl | |
|---|---|---|
| GitHub stars | ★ 22K | ★ 19K |
| License | GPL-3.0 | Apache-2.0 |
| Written in | Python | Rust |
| Last push | 2026-11-01 | 2026-11-03 |
| Forks | ⑂ 3.8K | ⑂ 752 |
| Self-hosting | Yes | Yes |
| Data ownership | Your server | Your server |
pick Mobile-Security-Framework-MobSF if
- You weight community size — 22K stars and counting
- You want the GPL-3.0 license terms
- Your stack matches Python
- You value the larger contributor base for long-term maintenance
pick hurl if
- You want the hurl feature set and don't need the biggest community
- You prefer the Apache-2.0 license terms
- Your stack matches Rust
- You evaluated both and hurl fits your workflow better
About Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile. MobSF can be used for a variety of use cases such as mobile application security, penetration testing, malware analysis, and privacy analysis. The Static Analyzer supports popular mobile app binaries like APK, IPA, APPX and source code. Meanwhile, the Dynamic Analyzer supports both Android and iOS applications and offers a platform for interactive instrumented testing, runtime data and network traffic analysis. MobSF seamlessly integrates with your…
read the full Mobile-Security-Framework-MobSF overview →
About hurl
What's Hurl? Hurl is a command line tool that runs HTTP requests defined in a simple plain text format . It can chain requests, capture values and evaluate queries on headers and body response. Hurl is very versatile: it can be used for both fetching data and testing HTTP sessions. Hurl makes it easy to work with HTML content, REST / SOAP / GraphQL APIs, or any other XML / JSON based APIs. Chaining multiple requests is easy: Also an HTTP Test Tool Hurl can run HTTP requests but can also be used to test HTTP responses . Different types of queries and predicates are supported, from [XPath] and [JSONPath] on body…
More in Developer Tools
Related comparisons
More API Development & Testing projects
Compare either of these against the rest of the API Development & Testing field.
Frequently asked questions
Is Mobile-Security-Framework-MobSF or hurl more popular?
Mobile-Security-Framework-MobSF has 22,109 GitHub stars and hurl has 19,296. Mobile-Security-Framework-MobSF has the larger community by that measure.
Are Mobile-Security-Framework-MobSF and hurl free?
Both are open source. Mobile-Security-Framework-MobSF is licensed under GPL-3.0 and hurl under Apache-2.0. Neither carries a licence fee.
What is the difference between Mobile-Security-Framework-MobSF and hurl?
Mobile-Security-Framework-MobSF is written in Python and hurl in Rust. The practical differences are community size, licence terms, language stack and release cadence — all compared in the table above.
Which should I choose, Mobile-Security-Framework-MobSF or hurl?
Choose Mobile-Security-Framework-MobSF if you want the larger community (22,109 stars) or its GPL-3.0 licence terms. Choose hurl if its feature set, stack or Apache-2.0 licence fits better. Both are self-hostable.