Mole Security Toolkit

Content rating
Everyone
5+
Downloads
Content rating
Everyone
Learn more
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image

About this app

Mole is a hands-on security toolkit for network professionals, IT administrators, and security-conscious users who want to understand what is happening on their networks and devices.

FEATURES

Wi-Fi Survey
Scan nearby wireless networks, inspect signal strength, encryption standards, and connected access points. Run a channel survey to identify congestion and rogue SSIDs.

Network Sweep
Discover all hosts on your local network using mDNS, SSDP, NetBIOS, and ARP. View open ports and running services across your subnet.

Bluetooth & BLE Scanner
Find nearby Bluetooth Classic and Bluetooth Low Energy devices. Inspect device names, addresses, and advertisement data.

NFC Reader
Read and inspect NFC tags before trusting them. View raw payloads and decoded NDEF records.

Honeypot
Run decoy listening sockets in the background to detect unauthorised connection attempts. Get notified the moment something probes your device.

Device Audit
Review your device's security posture — app permissions, developer options, backup settings, and hardware capabilities.

Traffic Monitor (uses a local VPN)
Monitor this device's own network traffic in real time and flag unexpected connections or unusual activity. To do this, Mole uses Android's VpnService API to act as a local VPN on your device. This is the only mechanism Android provides for an app to observe the network connections its own device is making, so VpnService is required for this feature to work. Android shows its own consent dialog before the first capture, and you can stop the capture at any time.

Exposure Check
Check whether email addresses or credentials appear in known data breaches.

QR Scanner
Scan QR codes and inspect the decoded URL or payload before following any link.

Reports
Export detailed findings as shareable security reports.

BACKGROUND MONITORING
Scheduled monitors run continuously in the background and re-arm automatically after a device restart. All monitoring is local — no data leaves your device.

VPN SERVICE DISCLOSURE
Mole uses Android's VpnService API for one purpose only: to power the Traffic Monitor feature described above, so that you can see the network connections your own device is making.

The VPN is entirely local to your device. Mole does not run a VPN server and does not route your traffic through any remote or third-party server. Traffic is forwarded on to its real destination unchanged, so your connectivity is unaffected. Mole decrypts nothing — it identifies destinations only from information protocols already send in the clear, such as the TLS SNI, the HTTP Host header and DNS queries. Connection records stay on your device and are never uploaded.

Mole is not a privacy, proxy or unblocking VPN, and does not use VpnService to filter, redirect, block, modify or monetise your traffic, or to serve ads. Starting a capture always requires your explicit consent through Android's system VPN dialog, and stopping it tears the VPN down immediately.

Mole installs on any Android device and reports which hardware capabilities are unavailable rather than refusing to run.
Wi-Fi, Bluetooth, NFC & network security scanner for auditing and monitoring.
Updated on
Sep 1, 2026

Data safety

Safety starts with understanding how developers collect and share your data. Data privacy and security practices may vary based on your use, region, and age. The developer provided this information and may update it over time.
  • This app may share these data types with third parties
    Device or other IDs
  • This app may collect these data types
    Device or other IDs
  • Data is encrypted in transit
  • Data can’t be deleted

What’s new

• Evil-twin alarm: catch a rogue access point impersonating a network you trust.
• Captive-portal check: see whether a public Wi-Fi sign-in page is safe before you use it.
• Device intelligence: profile every device on your network and flag the risky ones.
• Guardian: watch your network live and be told the moment something changes.
• Security library: plain-English explainers and fixes for every kind of finding.
• Plus a one-tap security grade, password breach checks, and reliability fixes.