Defendroid

Defendroid is an open-source advisory tool that reviews installed apps and selected device settings on an Android device and explains the items worth checking. It has no internet access, keeps every result on the device, and never changes a setting. App advisories • Apps built for older Android versions • Installation source, and apps that are hidden or cannot be launched • Capability to send cleartext network traffic • Declared accessibility services and legacy device-administrator components • Permission to install apps from unknown sources • Granted sensitive permissions • Third-party keyboards • System apps, when included from Preferences Settings advisories • Security patch age • Secure screen lock and password visibility • Possible root indicators • Automatic date, time and time zone • Screen timeout • Bluetooth status • Additional user profiles • Wi-Fi scanning while Wi-Fi is off CIS Google Android Benchmark Selected recommendations from the CIS Google Android Benchmark v1.6.0 are applied wherever Android provides a public, read-only way to inspect the related state. Android does not expose some benchmark settings to ordinary apps, so the results are advisory and do not constitute a complete CIS assessment, certification, or guarantee. Offline and private Defendroid does not request the Internet permission and operates entirely offline. Scan results are held in memory only and are never written to a file, transmitted, or shared. The app contains no advertising, analytics, or crash reporting, and its preferences are excluded from cloud backup and device transfer. Advisory only Defendroid reports items for review and does not fix or change them. Some findings are heuristic indicators that may vary by device manufacturer and Android version, and each should be reviewed before action is taken. Defendroid is not an antivirus application, and it is provided free of charge and as is. Permissions and their purpose • Query all packages: lists the installed apps so that each one can be reviewed for the app advisories above. • Read Wi-Fi state: a single read-only check of whether Wi-Fi scanning remains available while Wi-Fi is off. The app never starts a Wi-Fi scan and never reads network names or credentials. This app does not request Internet, network state, location, storage, contacts, phone, camera, microphone, or notification access. Open source Defendroid is released under the Apache License, Version 2.0. Source code on GitLab CIS Benchmarks is a trademark of the Center for Internet Security, Inc. Defendroid is not affiliated with or endorsed by the Center for Internet Security.