The eMAPT - Mobile Application Penetration Tester exam voucher costs Rs 64,900/= at induwara.lk, payable in Sri Lankan rupees by card or bank transfer. It is an official single-use voucher for the INE exam, not a practice test or a training course. The voucher is valid for 12 months from purchase. After payment our team confirms your order and sends the voucher code by email.
What this voucher is
The INE voucher for eMAPT - Mobile Application Penetration Tester, with no currency conversion to work out. It is the exam fee itself — a single-use code you redeem when you book your exam with the vendor's testing provider. It is not a training course, a practice test bundle or a study guide.
Each voucher is valid for 12 months from the date of purchase, so you can book the exam when you are ready rather than the day you buy.
Who sits this exam
eMAPT - Mobile Application Penetration Tester is aimed at SOC analysts, network engineers and anyone moving into a security role. It is a professional-level exam and expects real working experience, not just study. Sri Lankan banks, ISPs and BPO firms hire against named security certifications, and the exam fee is usually the part that stalls people.
Why buy it here
Vendor exam fees are quoted in US dollars, which means the rupee price you actually pay depends on your card's rate on the day and whatever your bank adds on top. Here the price is fixed in rupees — Rs 64,900/= — so what you see is what leaves your account.
You can pay by card through PayHere, or by direct bank transfer if you would rather not put an exam fee on a card. Both are confirmed by us before anything is sent.
How delivery works
Delivery is handled by a person, not a script. Once your payment is confirmed, our team contacts you and sends the voucher code to the email address on your order. That usually happens the same day, and you will hear from us either way — if there is any delay sourcing a particular voucher, we tell you rather than leaving the order sitting.
If you need an invoice for an employer or a training budget, say so when you order and we will issue one against the order number.
Exam at a glance
Prerequisites
None enforced — INE states 'Anyone can attempt the certification exam'. It describes the eMAPT as 'ideal for professionals with a working understanding of cybersecurity who are ready to deepen their expertise in mobile application security testing', and the exam as designed for cybersecurity professionals with intermediate experience in mobile application security. Commercial requirement: 'To take the eMAPT exam, you'll need both an INE subscription and an exam voucher.'
Sat through
INE Security — online, managed from INE's Certifications Dashboard. INE states the exam requires candidates 'to identify and exploit vulnerabilities in authentic Android and iOS applications', that results are auto-graded and delivered within a few hours, and that the score report shows performance metrics in each section. No test centre.
Certification valid
3
Price here
Rs 64,900/=
Exam details are taken from the vendor’s own documentation. Anything we could not confirm there is left out rather than estimated.
What you get, and what happens next
What you get
One official single-use exam voucher for eMAPT, eMAPT - Mobile Application Penetration Tester, covering the exam fee in full. It is a code, not a study course and not a practice test. There is nothing physical to ship and no delivery charge.
When it arrives
Emailed to the address on your order once we have confirmed the payment, by a person rather than automatically. In practice that is usually the same day and almost always within one working day. If sourcing a particular voucher is going to take longer, we tell you rather than leaving the order sitting.
How long it stays valid
12 months from purchase. Book and sit the exam before it expires, a code that has simply run out of time cannot be replaced, so do not buy months ahead of when you plan to use it.
How you redeem it
Redeemed inside INE's own certification dashboard. There is no test centre and no separate booking to make. The code unlocks the attempt on your account.
If the code does not work
If the vendor rejects it when you try to redeem it, tell us straight away and we replace it or refund you in full. Contact us before the voucher’s own expiry date.
If you do not pass
A voucher covers one attempt. A retake needs a new voucher, and the vendor, not us, sets how long you must wait before sitting the exam again. Check the vendor’s retake policy before you book.
Changing your mind
Full refund for any reason as long as we have not yet sent the code, including if you realise you have ordered the wrong exam, which is easy to do when codes look alike. Once the code has been sent it cannot be refunded, because the code is the product and it is single-use. Refunds & delivery in full.
What the exam covers
Reconnaissance and Static Analysis (20%)
Dynamic Testing and Runtime Manipulation (20%)
API and Backend Security Testing (15%)
Mobile Application Security Foundations (10%)
Threat Modeling and Attacker Mindset (10%)
Reverse Engineering & Code Deobfuscation (10%)
Mobile Malware Analysis (10%)
Reporting and Communication (5%) — documenting findings for technical and non-technical audiences using frameworks like OWASP MASVS, MSTG and PTES
Where it leads
Mobile application penetration tester, application security engineer and security consultant — INE names penetration testers expanding into mobile app testing and mobile-focused security analysts. Locally it is most relevant to anyone assessing banking, wallet or consumer mobile apps, and it distinguishes a tester in a market where most security CVs stop at web.
Sitting this exam in Sri Lanka
Mobile application testing has clear local demand because so much Sri Lankan consumer software ships mobile-first — banking apps, wallets, ride-hailing and delivery — and those products need assessment before release. The eMAPT is the certification in INE's catalogue that covers both Android and iOS to a professional standard, so it fills a gap a general pentest credential does not. The exam is sat online with no test centre involved, and INE requires a subscription alongside the voucher. Anyone here still holding an eMAPT voucher bought before 28 May 2025 should check it: INE's own notice says that generation was usable only through December 2025.
Where these details come from
Every fact on this page was read off the vendor’s own documentation. Vendors change exam content, pricing and retirement dates without notice, so check these before you book.
I have an older eMAPT voucher — can I still use it?
If it was bought before 28 May 2025, almost certainly not. INE's own notice says the previous version of the exam was retired and that older vouchers could be used 'through December 2025'. That deadline has passed. INE's page does still link a voucher-exchange programme for holders — it does not publish a closing date for that — so it is worth asking INE directly before you write the voucher off.
What changed in the enhanced eMAPT?
INE relaunched it on 10 July 2025 with what its announcement describes as 'an innovative dual-exam approach that validates both conceptual understanding and practical application', rather than a single practical challenge. The domain map was also rebuilt — the current exam has eight weighted domains including mobile malware analysis and reverse engineering.
Does the exam cover both Android and iOS?
Yes. INE states the certification assesses security testing skills 'across both Android and iOS platforms' and requires candidates to identify and exploit vulnerabilities in authentic Android and iOS applications. The reverse-engineering objective names DEX, OAT and Mach-O binaries specifically. You cannot pass it on Android knowledge alone.
How much of the exam is runtime work versus static analysis?
They are weighted equally at 20% each. Dynamic testing and runtime manipulation covers hooking with Frida, Objection and Xposed, and bypassing SSL pinning, root and jailbreak detection and anti-debugging. Reconnaissance and static analysis is the other 20%. A further 15% is API and backend security testing, including BOLA, BFLA and token manipulation.
Does INE publish a time limit or pass mark for the eMAPT?
No. INE's page says only to complete the exam 'within the allotted time' and states no pass mark. We will not quote figures INE has not published. What is confirmed is that grading is automatic, results arrive within a few hours, and the score report shows your performance in each of the eight domains.
What reporting standards does the exam expect?
Reporting and communication is 5% of the exam, and INE names the frameworks in its objective: documenting and communicating technical vulnerabilities for technical and non-technical audiences 'using frameworks like OWASP MASVS, MSTG, and PTES'. PTES and OWASP MSTG also appear in the threat-modelling domain.
What does the eMAPT voucher cost in Sri Lanka?
Our eMAPT voucher is Rs 64,900/=, charged in rupees, and it is issued against the current version of the exam rather than the retired one. Note that INE requires an INE subscription in addition to the voucher.
Where to go next
The step before and the step after this one, plus a comparable exam from another vendor.
