APK security check for Android apps
Upload your Android APK and get a plain-English report of the security mistakes that are easiest to spot and cheapest to fix before a Play Store release. It's useful for fintech, banking, delivery and school apps, and any app that handles logins or payments.
Scan my APK free Free account needed for uploads. No card.
What ovuGuards checks in an APK
- Debuggable builds: a release that still has android:debuggable switched on lets anyone attach a debugger.
- Backups: allowBackup can let app data be copied off a phone.
- Cleartext traffic: whether the app allows plain HTTP, and plain-HTTP URLs embedded in the code.
- Permissions: high-risk and dangerous permissions, so you can drop the ones you don't need.
- Exported components: activities, services, receivers and providers other apps can call without a permission.
- Hardcoded secrets: API keys and tokens left in the code that match known patterns.
- Signing: unsigned builds, the Android debug certificate, old v1-only signing and weak keys.
- Old Android targets: minSdk and targetSdk levels that miss modern platform protections.
How it works
- Create a free account and confirm your email.
- Choose "Android APK" and upload the file.
- Read the report, fix the issues, and scan again to confirm.
This is a static review of the file, not a full penetration test. It's a fast way to catch common mistakes.
Frequently asked questions
Is the APK security check free?
Yes. The Free plan includes 3 scans a month, and APK scans count as one of them. You need a free account because the APK is uploaded to us for analysis.
Do you run my app?
No. We analyse the APK file statically: the manifest, permissions, components, embedded strings and signing certificate. The app is never installed or executed.
What happens to my APK after the scan?
The uploaded file is deleted as soon as the analysis finishes. Only the findings are kept in your report.
Can I scan an app from the App Store?
For iOS apps you can paste an App Store link and we review the public listing information. Android analysis needs the APK file.