Defendroid

Defendroid is an open-source Android advisory tool. It reviews selected app information and device settings exposed through public Android APIs, then explains items you may want to check. It informs you; it does not change your settings or claim to find every security or privacy issue.

Apps Advisory
Review selected signals for installed non-system apps. Examples include:
- apps built for older Android versions
- installation source and hidden or unlaunchable apps
- cleartext traffic capability
- declared accessibility services or legacy device-admin components
- permission to request installation of unknown apps
- granted sensitive permissions
- installed third-party keyboards

Settings Advisory
Review supported device settings and indicators. Examples include:
- security patch age and whether a secure screen lock is set
- password-character visibility
- possible root indicators
- automatic time and time zone
- screen timeout
- Bluetooth status
- associated user profiles
- Wi-Fi scanning availability while Wi-Fi is off

CIS Google Android Benchmark
Defendroid uses selected CIS Google Android Benchmark v1.6.0 recommendations when Android exposes a suitable public, read-only way to inspect the related state. Android prevents ordinary apps from reading some benchmark settings. Therefore, results are advisory and do not represent a complete CIS assessment, certification, or guarantee.

Offline and private
Defendroid has no internet access and operates entirely offline. Analysis and results remain on your device. The app does not collect, transmit, or share your information, and it contains no ads. Read-only Wi-Fi state access is used only to check whether Wi-Fi scanning remains available while Wi-Fi is off.

Advisory only
Defendroid reports items for you to review; it does not automatically fix or change them. Some findings are partial or heuristic indicators and may vary by device manufacturer and Android version. Review findings before taking action. Defendroid is not an antivirus app.

Open source
Defendroid is distributed under the GNU Affero General Public License version 3.0 (AGPLv3). Source code: https://gitlab.com/pikcn/defendroid

For Non-Commercial Use Only
Defendroid is suitable for non-commercial purposes only. It is not intended for use in commercial or business settings.

Defendroid is free and contains no ads. It is provided "as is." Use it with your own judgment and other appropriate security practices.