MobInspect

MobInspect is a fully offline APK security analyzer that runs entirely on your device - no data ever leaves your phone.

Scan any APK or installed app to uncover security vulnerabilities, hardcoded secrets, dangerous permissions, malware indicators, privacy leaks, and weak cryptography. Powered by on-device AI with TFLite-based malware detection and a comprehensive rule engine aligned with OWASP MASVS standards.

Key Features:
• 100% Offline - All analysis happens on-device. No internet required, no data collection, no accounts.
• AI-Powered Malware Detection - Multi-layer ML + rule-based ensemble threat analysis with localized verdicts in 7 languages.
• Comprehensive Static Analysis - 10 security modules: permissions, SSL/TLS, WebView, SQL injection, cryptography, secrets, deep links, SDKs, manifest, and storage.
• Full Device Scan - Scan all installed apps at once with risk ranking, app source identification, and hidden background runner detection.
• Trusted Apps Vault - Verify app integrity with SHA-256 checksums to detect unauthorized modifications.
• APK Extraction - Save any installed app's APK to Downloads for archival or further analysis.
• Report Comparison - Track security changes between app versions over time.
• Multi-Format Export - PDF, JSON, SARIF and CSV reports with professional formatting for CIRT teams and audits.
• Smali Decompiler - Browse and inspect APK class structure and bytecode.
• Manifest Viewer - Syntax-highlighted AndroidManifest.xml viewer with line numbers.
• Multi-Language - Fully localized in 7 languages: English, Bengali, Hindi, French, Japanese, Arabic (RTL), and Spanish. All screens including AI verdicts, Privacy Policy, and Scoring Matrix are translated.
• Security Scoring - Transparent, MobSF-aligned risk scoring with letter grades (A-F) and detailed scoring matrix.
• Certificate Analysis - Signature chain validation, re-signing detection, trust level assessment with enhanced readability.

Built for security researchers, penetration testers, developers, and privacy-conscious users who want to understand what their apps are really doing.