Local Android package intelligence
APK & Sideload App Risk Inspector
Inspect WhatsApp, SMS and web-downloaded APKs for banking-trojan permission combinations, lookalike package names, code inventory, certificate artifacts and embedded destinations—without installing them.
Local execution · source content not transmitted · JavaScript / browser worker—not a WebAssembly claim
Upload Android APK
Stays in your browser
Never test by installing
A malicious APK can abuse Accessibility, overlay login screens and intercept OTP messages.
Package anatomy
Accessibility + SMS + overlay combination
Boot persistence and device administration
Bank/payment package-name impersonation
DEX, native library and certificate inventory
Embedded HTTP/HTTPS destinations