Nemesis Blue

Nemesis Blue is a mobile endpoint-security app (mobile EDR) that protects your phone through the operating system's own security windows — honestly, without the false promises many "antivirus" apps make.

WHAT IT DOES
• Network threat protection — Nemesis Blue uses Android's VpnService to run a local, on-device firewall that inspects your phone's outbound connections and DNS lookups and blocks malicious, phishing, and command-and-control destinations in real time. Your traffic stays on your device; it is never routed through an outside server.
• Malicious app detection — Nemesis Blue watches new app installs and scans apps already on your device, flagging sideloaded (non-Play) packages and checking them against a malicious-app threat feed.
• Device posture — it checks for root and integrity signals that weaken your device's built-in protections.
• App lock — protect the app itself with your fingerprint or Face unlock so only you can open it.

VPN PERMISSION (VpnService)
This app declares Android's VpnService. It is used solely to power the on-device network protection described above: the local VPN lets Nemesis Blue inspect DNS lookups and outbound connections device-wide and drop known-malicious domains, because Android only allows an app to filter network traffic across the whole device through the VpnService API. No VPN tunnel to a remote server is created, and no traffic, browsing history, or personal data is sent to Nemesis Labs or any third party — all filtering happens locally on your device. You can turn network protection off at any time in the app, which disables the VPN.

HONEST BY DESIGN
A phone app runs in a sandbox — it cannot scan or shut down other apps the way a desktop antivirus does. Nemesis Blue is a detect-and-alert EDR: it watches the signals the OS actually allows (network, app integrity, device posture) and warns you, instead of claiming powers a mobile app doesn't have.

FREE — EVERYTHING INCLUDED
The Free plan includes every on-device protection: network filtering, malicious-app detection, and device posture. No ads. No in-app purchases.

FOR BUSINESSES & FLEETS
Organizations can activate a device with a token from their Nemesis console for centrally-managed protection, fleet policy, and priority response — no purchase inside the app.

PRIVACY
Nemesis Blue collects only what security needs — a device identifier, security detections, and diagnostics — encrypted in transit and never sold or shared with advertisers. See our privacy policy for details and how to request deletion.