CHICAGO, Sept. 14, 2026 (GLOBE NEWSWIRE) -- As Apple’s iOS 27 brings agentic AI into the mainstream mobile app experience, new NowSecure data shows nearly one in four mobile apps already contain functionality that could be exposed to AI agents. Across apps NowSecure assessed June through August 2026, 24% contained functionality potentially exposed to Siri AI, according to NowSecure, a leader in mobile application risk management.
To help organizations adopt Apple’s newest OS, take advantage of approved Agentic Workflows and manage the risk of shadow agentic workflows, NowSecure delivers day-one support for iOS 27. NowSecure Platform identifies the App Intents that determine what Siri AI can see and do inside an app for first- and third-party apps.
With iOS 27, Siri AI runs on a new foundation model and can retrieve information and take actions using apps without a user needing to open them. Significant new capabilities and code will be added to mobile apps to enable them to do more with Siri AI and other AI models. An agentic request can draw on data and trigger actions exposed by an app but initiated outside it, extending mobile risk beyond the binary and its APIs. The new capabilities and code requires new security testing and risk management practices.
“Siri AI and the agentic workflow starts and lives outside of the app,” said NowSecure CEO Alan Snyder. “Siri AI can use any of the Siri AI enabled apps to fulfill the user request. That means an app's data and eventually its actions are controlled by Siri AI. Security teams have never tested for agentic workflow risk and therefore security testing of mobile apps must change to address the new reality of mobile AI.”
NowSecure Adds Day-One iOS 27 Testing
NowSecure Platform delivers core iOS 27 testing capabilities, including an inventory of App Intents and their exposed data and actions, so teams can evaluate their security posture as they update existing apps or build new ones for iOS 27. Existing customers receive this coverage automatically, with no additional setup required.
NowSecure is known for having the most comprehensive iOS coverage and already identifies AI usage (on-device, private cloud compute and public cloud) in iOS mobile apps.
Visibility into where AI processing happens carries particular weight for regulated industries, where security and compliance teams are already determining how Siri AI and Apple Intelligence affect obligations under frameworks such as HIPAA, GDPR and PCI DSS. OWASP has moved in parallel, publishing its Top 10 for Agentic Applications for 2026 as a reference point for this category of risk.
About NowSecure
NowSecure helps organizations manage AI risk inside mobile apps, analyzing app binaries and runtime behavior on real devices to give security and compliance teams visibility into hidden AI, sensitive data flows and third-party exposure. As a leader in mobile application risk management, NowSecure brings more than 15 years of mobile security expertise, with 12,000+ penetration tests, 5M+ automated assessments and 8M+ vulnerabilities identified. Leading telecom, banking, healthcare and government organizations, including the DOJ, DOD and DOS, trust NowSecure. The company also supports open-source projects including Frida, Radare2 and the OWASP MASVS standard.
Media Contact
Michelle Schafer
schafer@merrittgrp.com
703-403-6377
