SecureOne: Phone Security

SecureOne checks what is actually on your phone and tells you what it found — in plain words, with the reasoning shown.

WHAT IT CHECKS

• Apps — each installed app's fingerprint is checked against antivirus engines (VirusTotal and MalwareBazaar), with no account needed. Also its permissions, where it was installed from, and whether its code contains known tracking libraries; trackers are matched on your phone against a signature list.
• Files and downloads — a file's fingerprint is checked against threat databases, and its real type is compared with its name.
• Links — before you open one, and as they arrive in your notifications. Checked against Google Safe Browsing, VirusTotal and URLhaus.
• Wi-Fi — encryption, captive portals and whether the network is as it claims.
• Data breaches — whether your email address has appeared in a known breach, and whether a password has been exposed. Your password itself is never sent; only the first five characters of its hash leave the phone.
• Your phone's own posture — screen lock, security patch age, developer options, signs of rooting.
• Incoming callers — a warning when other people have reported the number.
• Deep Security Scan — a longer check of your phone's apps and settings, with a saved report. Its optional 10-minute network check uses Android's VpnService: only the names your phone looks up pass through it, they are matched against public malware lists on the phone, and nothing is sent to our servers. You start it yourself and can stop it at any time.

FIND MY PHONE

Sign in at secureone.agcone.in and you can locate this phone, make it ring, or lock it. It works over the internet, so it still reaches the phone after the SIM has been removed. The phone must be switched on and online.

WHAT IT DOES NOT DO, STATED PLAINLY

• It does not block calls. It warns you; your phone still rings, and the choice to answer stays yours.
• It cannot promise your phone is safe. No security app can. SecureOne reports what it checked and what it could not check — a check that could not run is shown as exactly that, never as a pass.
• It does not review your past calls. Google reserves call-log access for the phone's default dialer app.
• It has no antivirus "real-time shield" that silently removes files. Android does not let one app delete another's files, and SecureOne will not pretend otherwise.

PRIVACY

• No ads. No advertising or analytics SDKs. Crash reports can be switched off in Settings.
• Your messages and notifications are read in memory to find links, then discarded. The text is never stored and never uploaded.
• SecureOne does not read your contacts or your call history.
• Online checks send only what the check needs: a link, a file fingerprint, the start of a password hash, your email address for a breach check, and - only if you turn on caller warnings - the number that is calling. Never the message, the file or the password.
• Full detail: https://secureone.agcone.in/privacy.html

PLANS

Free, with no time limit: the full phone scan and security score, the malware check of every installed app, app and device security, the password leak check, Find my phone (locate, ring, lock) and recovery codes. With a free account, also 3 link checks, 3 file checks and 3 scam number checks a day.

Plus is paid, through Google Play. It adds links checked as they arrive, the caller warning, unlimited link, file and number checks, the email leak check, the Wi-Fi check, payment guard, privacy advisor, Deep Security Scan, background data, the app updates check, and Find my phone's live track, photo and audio. A new account gets every feature for 12 days.

ACCOUNT

The malware check of your apps, and every scan that reads this phone, run without an account. Signing in (by a one-time code sent to your email — there is no password) is needed for link, file and number checks, the leak checks, and Find my phone.

SecureOne is a product of AGC One, Nashik, India.
Questions: support@agcone.in