Local Android package intelligence
APK & Sideload App Risk Inspector
Inspect WhatsApp, SMS and web-downloaded APKs for banking-trojan permission combinations, lookalike package names, code inventory, certificate artifacts and embedded destinations—without installing them.
Processing stays in your browser
Upload Android APK
Stays in your browser
Never test by installing
A malicious APK can abuse Accessibility, overlay login screens and intercept OTP messages.
Package anatomy
Accessibility + SMS + overlay combination
Boot persistence and device administration
Bank/payment package-name impersonation
DEX, native library and certificate inventory
Embedded HTTP/HTTPS destinations