APK Sentinel

APK & Device Security Scanner · v1.0

A native Android app that inspects any APK before you install it — 60+ risky permission patterns, 75 DEX heuristic markers, 19 high-risk component checks, device security posture, smishing detection, and optional VirusTotal / HIBP integration.

Freedownload · no subscription · no cloud dependency

Download APK View on GitHub

APK Sentinel · Scan

What's included

Static APK analysis — 60+ risky permission patterns, 75 DEX heuristic markers, 19 high-risk component checks
90-combination attack-vector detection engine
Device security posture audit + live permission inspector
SMS / QR code / image-based smishing detection
Optional VirusTotal API integration for cloud hash lookup
EICAR test file detection + polyglot image detection
HIBP (Have I Been Pwned) breach check for email addresses
90 unit tests passing — fully offline by default

Technical details & code → Technology

1. Enable sideloading

APK Sentinel is not yet on Google Play. To install it you need to allow installation from unknown sources for your browser or file manager:

Android 8+: Settings → Apps → Special app access → Install unknown apps → allow your browser
Android 7: Settings → Security → Unknown sources → enable

2. Download and install

Contact us or follow the GitHub link to download the latest signed APK. Tap the downloaded file in your notification shade or Files app and follow the installer prompt.

The APK is signed with a developer key. You will see a "Play Protect" warning on first install — this is expected for sideloaded apps. Tap "Install anyway."

3. Permissions

APK Sentinel requests Storage permission to read APK files you select, and Camera if you use QR smishing detection. No network permission is requested by default — VirusTotal and HIBP lookups are opt-in and require you to supply your own API keys in Settings.

4. No account needed

There is no sign-up, no login, no telemetry, and no cloud sync. The app runs fully offline. Your scan results are stored locally in app-private storage and are never transmitted anywhere unless you explicitly trigger a VirusTotal lookup.

Free & open-source (MIT)

APK Sentinel is free to download, use, and modify under the MIT licence. There are no tiers, no paywalls, and no in-app purchases.

Full feature set — no features locked behind a paid plan
No ads, no tracking, no cloud account required
Source available on GitHub (link above)

Enterprise MDM edition

We build custom enterprise editions with MDM integration, silent deployment via your EMM platform, centralised reporting dashboards, and custom detection rule sets. Contact us to discuss requirements and pricing.

Does it send data anywhere?

No — by default the app is fully offline. VirusTotal and HIBP lookups are strictly opt-in. You supply your own API keys, and the app only calls those APIs when you explicitly trigger a scan that uses them.

Does it detect all malware?

No tool can guarantee 100% detection. APK Sentinel uses static heuristics and pattern matching — it flags high-risk indicators, not definitive verdicts. Use it alongside VirusTotal for a second opinion, and apply your own judgment.

What Android version is required?

Android 7.0 (API level 24) or higher. The app is tested on Android 10–15 (API 29–35). Devices running Android 6 or below are not supported.

Is it on Google Play?

Not yet — Google Play's policies restrict apps that analyse other APKs. We are evaluating a Play submission. In the meantime, download directly via the link above or contact us for the latest signed APK.

Need a custom enterprise MDM-integrated security app? Let's talk.

We build tailored editions with centralised reporting, silent EMM deployment, and custom detection rules for your device fleet.