SecureOne: Phone Security

AGC One

About this app

SecureOne (Secure One) checks what is actually on your phone and tells you what it found - in plain words, with the reasoning shown.


WHAT IT CHECKS

• Apps — every installed app's permissions, where it was installed from, and whether its code contains known tracking libraries. Matched on your phone against a signature list, so your app list is not uploaded.
• Files and downloads — a file's fingerprint is checked against threat databases, and its real type is compared with its name.
• Links — before you open one, and as they arrive in your notifications. Checked against Google Safe Browsing, VirusTotal and URLhaus.
• Wi-Fi — encryption, captive portals and whether the network is as it claims.
• Data breaches — whether your email address has appeared in a known breach, and whether a password has been exposed. Your password itself is never sent; only the first five characters of its hash leave the phone.
• Your phone's own posture — screen lock, security patch age, developer options, signs of rooting.
• Incoming callers — a warning when other people have reported the number.
• QR codes — see what a code contains (a link, a UPI payment, a Wi-Fi network) before anything opens it. Nothing opens by itself.
• A phone number — type any number and see how many people reported it as a scam. No reports is not proof it is safe.
• Loan apps — lending apps that hold your contacts, photos or messages, which no lender needs to decide on a loan.
• Deep Security Scan — a longer check of your phone's apps and settings, with a saved report. Its optional 10-minute network check uses Android's VpnService: only the names your phone looks up pass through it, they are matched against public malware lists on the phone, and nothing is sent to our servers. You start it yourself and can stop it at any time.

FIND MY PHONE

Sign in at secureone.agcone.in and you can locate this phone, make it ring, or lock it. It works over the internet, so it still reaches the phone after the SIM has been removed. The phone must be switched on and online.

WHAT IT DOES NOT DO, STATED PLAINLY

• It does not block calls. It warns you; your phone still rings, and the choice to answer stays yours.
• It cannot promise your phone is safe. No security app can. SecureOne reports what it checked and what it could not check — a check that could not run is shown as exactly that, never as a pass.
• It does not review your past calls. Google reserves call-log access for the phone's default dialer app.
• It has no antivirus "real-time shield" that silently removes files. Android does not let one app delete another's files, and SecureOne will not pretend otherwise.

PRIVACY

• No ads. No advertising or analytics SDKs. Crash reports can be switched off in Settings.
• Your messages and notifications are read in memory to find links, then discarded. The text is never stored and never uploaded.
• SecureOne does not read your contacts or your call history.
• Online checks send only what the check needs: a link, a file fingerprint, the start of a password hash, your email address for a breach check, and - only if you turn on caller warnings - the number that is calling. Never the message, the file or the password.
• Full detail: https://secureone.agcone.in/privacy.html

Available in English, हिंदी and मराठी.

ACCOUNT

Most checks run without an account. Signing in (by a one-time code sent to your email — there is no password) is needed only for the checks that use our server, and for Find my phone.

SecureOne is a product of AGC One, Nashik, India.
Questions: [e-mail]

What’s new

New: Deep Security Scan, in Tools. It looks for signs that this phone may have been compromised, including from before SecureOne was installed, and says how sure it is of each one. New: Background data shows which apps sent the most in the last 7 days and how long each was open. Call protection now has its own switch, what it is doing right now, and a link to Check a number. OTP guard has a clearer screen.