APK & AAB analysis

Android App Scanner

Upload an APK for a fast structural and risk scan: permissions, components, signing, manifest security flags, and size.

Analyze · Android App ScannerReady

Drop your file here

or click to choose from your device

Accepts: .APK · up to 1 GB
Deleted after your scan. Files you upload are processed on our servers over an encrypted connection, then removed by the next hourly cleanup after analysis finishes (long scans are protected while they run). We never share them, and need no account.

About Android App Scanner

Upload an APK for a fast structural and risk scan: permissions, components, signing, manifest security flags, and size.

Android App Scanner is part of APKLint’s apk & aab analysis toolkit — Unpack, inspect, and break down Android packages. It’s free to use and needs no account.

Your privacy is the default: files you upload are processed on our servers over an encrypted connection and permanently deleted by a scheduled hourly cleanup after analysis finishes, and never shared.

What Android App Scanner checks

  • Security-first read of the manifest
  • Dangerous permissions and exposed components
  • Signing scheme weaknesses (e.g. v1-only)
  • Cleartext and debuggable flags

Good to know: Static, manifest-driven security signals — not a substitute for dynamic testing.

When to use Android App Scanner

Best for
A security-leaning structural scan of an uploaded APK: it reads the manifest with risk in mind, flagging debuggable builds, exported components, and cleartext settings alongside the basics.
Not the right tool for
Not the place for a size audit or a pure metadata dump; use APK Size Analyzer or APK Analyzer for those.
What you get back
A risk-oriented summary: permissions of note, exported surfaces, debuggable/backup flags, and signing, with the riskier findings called out.
How it differs from related APKLint tools
Compared with APK Scanner (contents) and APK Analyzer (structure), Android App Scanner is tilted toward 'what here could be a security problem'.
Limitations
It is a static manifest-level scan, not a dynamic test or a guaranteed malware verdict.

How to use Android App Scanner

  1. Choose your APK file — Drop an .apk file onto the page, or click to select it from your device.
  2. Send securely — The file is uploaded over an encrypted connection to our analysis servers.
  3. Read your report — APKLint unpacks and inspects the package and lays out the results on screen.
  4. Your file is removed — It's deleted by an hourly cleanup job after analysis finishes.

Why use APKLint

Always free

Every tool is free with no login and no paywall. Reasonable file and input limits keep the free service stable.

No on-page ad banners

A clean, focused interface with no third-party ad banners cluttering your results.

Privacy-first

Files you upload are deleted by a scheduled hourly cleanup after analysis finishes, and never shared.

Open-source engines

Built on androguard for APK parsing and manifest/certificate analysis.

No sign-up

Start immediately — no account, login, or email required.

Works anywhere

Runs in any modern browser, on desktop or mobile.

Frequently asked questions

What does Android App Scanner do?

Upload an APK for a fast structural and risk scan: permissions, components, signing, manifest security flags, and size.

What does it scan for?

It leads with security: risky permissions, exported surfaces, signing weaknesses, and insecure flags from the manifest and certificate.

Is it free to use?

Yes. Every tool on APKLint is completely free, with no sign-up and no account.

How is my data handled?

Your uploaded file and its result are processed on our servers over an encrypted connection, then removed by the next hourly cleanup after analysis finishes. We never share them.

What files can I send?

An Android APK — a .apk file — up to 1 GB.

All product names, logos, and trademarks are property of their respective owners. APKLint is an independent toolset and is not affiliated with, endorsed by, or sponsored by Google, Android, or any other party.