Defendroid

Pikcn Technologies

About this app

Defendroid is an open-source advisory tool that reviews installed apps and selected device settings on an Android device and explains the items worth checking. It has no internet access, keeps every result on the device, and never changes a setting.

App advisories
• Apps built for older Android versions
• Installation source, and apps that are hidden or cannot be launched
• Capability to send cleartext network traffic
• Declared accessibility services and legacy device-administrator components
• Permission to install apps from unknown sources
• Granted sensitive permissions
• Third-party keyboards
• System apps, when included from Preferences

Settings advisories
• Security patch age
• Secure screen lock and password visibility
• Possible root indicators
• Automatic date, time and time zone
• Screen timeout
• Bluetooth status
• Additional user profiles
• Wi-Fi scanning while Wi-Fi is off

CIS Google Android Benchmark
Selected recommendations from the CIS Google Android Benchmark v1.6.0 are applied wherever Android provides a public, read-only way to inspect the related state. Android does not expose some benchmark settings to ordinary apps, so the results are advisory and do not constitute a complete CIS assessment, certification, or guarantee.

Offline and private
Defendroid does not request the Internet permission and operates entirely offline. Scan results are held in memory only and are never written to a file, transmitted, or shared. The app contains no advertising, analytics, or crash reporting, and its preferences are excluded from cloud backup and device transfer.

Advisory only
Defendroid reports items for review and does not fix or change them. Some findings are heuristic indicators that may vary by device manufacturer and Android version, and each should be reviewed before action is taken. Defendroid is not an antivirus application, and it is provided free of charge and as is.

Permissions and their purpose
• Query all packages: lists the installed apps so that each one can be reviewed for the app advisories above.
• Read Wi-Fi state: a single read-only check of whether Wi-Fi scanning remains available while Wi-Fi is off. The app never starts a Wi-Fi scan and never reads network names or credentials.

This app does not request Internet, network state, location, storage, contacts, phone, camera, microphone, or notification access.

Open source
Defendroid is released under the Apache License, Version 2.0. Source code on GitLab

CIS Benchmarks is a trademark of the Center for Internet Security, Inc. Defendroid is not affiliated with or endorsed by the Center for Internet Security.

What’s new

• Redesigned interface with light, dark and follow-system themes.
• Every advisory now shows a category label, app advisories are sorted by name, and tapping an app advisory opens its settings screen.
• Sensitive-permission and cleartext-traffic advisories are limited to apps that hold the Internet permission.
• Clearer wording throughout the app.
• Now licensed under the Apache License 2.0, which permits commercial use.