Safeavio Sentinel Mobile

• Posture score with reasonsAvailable

  Root, unknown sources, lock, encryption, developer mode, OS level.

  > 4.50

• Remote-access app warningAvailable

  12 known remote-control apps; critical if one holds Accessibility control, medium if merely installed.

  > 4.50

• Silent-installer detectionAvailable

  Apps that install other apps in the background or look like a miner. Store and phone-maker apps are not listed.

  > 4.50

• App InspectorAvailable

  Installed apps tagged by risky permission combinations, such as SMS plus internet or screen overlay.

  > 4.50

• APK files in your foldersAvailable

  Finds installer files in Download, WhatsApp, Telegram and other folders, also inside .zip and .rar, and compares them with the virus list on the phone. The full phone scan can delete or quarantine them.

  > 4.50

• Play Integrity and Play Protect statusComing

  Not collected today. Shown as unknown, never as passed.

• Lock, alarm and wipe from the web portalAvailable

  The alarm sounds even when the phone is on silent.

  > 4.48

• Locate on requestAvailable

  Last known location with accuracy and age, only when you ask.

  > 4.48

• Tamper protectionAvailable

  Turning off the app's Device Admin is reported and locks the phone.

  > 4.48

• SIM-change alertsLimited

  The phone compares a salted record of its SIM on each check and tells you when the SIM changes (needs the Phone permission). A SIM swap done at the operator is invisible until the new SIM reaches a phone; there is no operator link. Not yet tried on a real SIM change.

  > Published Android APK; see download page

In the Android download from version 4.31. See what the list covers on the page “What Sentinel finds on Android”.

• Known-virus list on the phoneAvailable

  Android malware fingerprints from an open virus database and our own sources, signed by our hub (the live count is on the Android protection page), updated by themselves when the phone is online and matched with no internet.

  > 4.20

• Full phone scanAvailable

  Folders and SD-card files the phone and storage provider allow; finds supported app installers, compares every app and installer with the list on the phone (nothing is sent), and ends with one plain result and what to do.

  > 4.27

• Quick and app scans include viruses and fake appsAvailable

  A step that matches installed apps with the list and checks for fake brand apps and hidden apps.

  > 4.23

• Automatic protectionAvailable

  Checks a new app, a new download (Downloads, Telegram, WhatsApp documents) and, every 6 hours, the installed apps; a notification if something is wrong. Background work depends on Android and running protection. Battery cost has not been measured across phone models.

  > 4.20–4.23

• Fake brand apps and hidden appsAvailable

  An app called WhatsApp, Paytm or a bank on the wrong package; an app with no icon that can read SMS or the screen. Only apps from outside an app store are judged.

  > 4.23

• The virus list keeps itself currentAvailable

  The hub adds new malware fingerprints from several sources every hour. A phone downloads only what is new (a few kilobytes), stores each fingerprint once in a folder on the phone, and checks for news when the app opens, before every scan and when it comes online. Nothing is uploaded.

  > 4.29

• Brand-new malware that no list knowsComing

  Signatures cannot find it. Behaviour checks and code analysis are planned.

Live on the web portal and in the Android app from version 4.31 (see the download page for the current version).

• Family map, status, safe places and SOS on the webAvailable

  Each member shows battery, last seen and arrived or left; a guardian can mark an SOS as handled.

  > Web portal

• Family chatAvailable

  A family group and private chats between two members. Stored on our hub, not end-to-end encrypted, kept 90 days.

  > Web portal; Android 4.50

• Share location with a pulseAvailable

  Location goes in a 15-minute pulse; "track live" for 10, 30 or 60 minutes, and the watched phone shows who is watching.

  > 4.12

• Notifications without a push serviceAvailable

  Messages and SOS reach the phone in a few seconds while protection runs.

  > 4.10

In the current download (first published in 4.48). Every check runs on the phone.

• Message, UPI and impersonation checksAvailable

  Paste a message or payment request, or share it to Sentinel from any app; get red flags and a risk level, computed on the phone.

  > 4.50

• Link check and signed blocklistLimited

  Lookalike domains, brand names hidden in subdomains and a signed list of known-bad sites. There is no shared reputation service, so an unknown link is called unknown.

  > 4.50

• Camera QR scanner, scan from a picture and payment-QR checksAvailable

  The code is decoded on the phone and the payee of a payment code is shown.

  > 4.50

• Password exposure checkAvailable

  k-anonymity: only the first five characters of the password's hash leave the phone.

  > 4.50

• DNS protection and your blocked and allowed sitesAvailable

  An opt-in local DNS filter; it covers apps that use the phone's normal DNS.

  > 4.8 and later

• Hacked social account help and phone takeover protectionAvailable

  Checklists and a list of apps with powerful permissions; warns, never switches anything off.

  > 4.48

• Automatic SMS screeningComing

  Not built. Android and the Play policy restrict apps from reading other apps' messages; see the opt-in "pick a message" help below.

• Warnings based on what is said in a callComing

  We will not record or intercept calls and cannot hear them.

In the Protect tab. Risk warnings only: there is no link to any bank, NPCI or telecom operator, so Sentinel cannot confirm that a payee is genuine or that money is safe, and it cannot reverse a payment. Nothing about a payment is uploaded; every check runs on the phone. None of this has been run on a real phone for every signal yet.

• UPI Shield and QR ShieldAvailable

  Checks the payee, name, amount and note you type or scan for warning signs: a handle that does not match the name, "support" names on personal wallet IDs, collect-request wording, round or large amounts, refund or KYC notes and look-alike merchants. Pattern checks only; no bank lookup.

  > Android app (from 4.47)

• Someone I know is asking for moneyLimited

  Paste the message and tick what happened; you get a risk level and a confidence. It cannot read SMS, WhatsApp or calls on its own.

  > Android app (from 4.47)

• Fake Banking App ShieldLimited

  A local list of bank and payment apps flags apps that imitate one, and banking-looking apps that did not come from an app store. The list is partial. The signer check says "Not available": no reference signer is configured, so an app is never called genuine.

  > Android app (from 4.47)

• Payment Safety Mode and takeover alertsLimited

  Warns, and never blocks, when a payment app opens while another app can control the phone or draw over it, and can raise a notice when an Accessibility or notification-access power is newly given. It cannot see when another app is sharing your screen, because Android does not tell apps; it looks at the powers apps hold. A new device administrator is only found by the periodic check.

  > Android app (from 4.47)

• Call-context modeLimited

  Optional and off by default. During a call, or within 10 minutes after one, a new powerful permission is rated critical. It reads only whether a call is active; never audio, numbers or contacts. Needs the Phone permission, asked only when you turn it on. Not yet tried on a real call.

  > Android app (from 4.47)

• Payment verification and Recovery CenterAvailable

  Call back a trusted contact on the saved number and use a family code word, with the result as risk and confidence, never "real" or "fake". Offline tick-lists for "I sent money to a scammer" (bank at once, 1930, cybercrime.gov.in) and five other emergencies. Guidance only.

  > Android app (from 4.47)

• NFC and card fraudLimited

  Guidance only: Safeavio cannot detect NFC attacks on this phone.

  > Android app (from 4.47)

• Bank-app signer comparisonComing

  The structure exists, but no official fingerprint has been collected yet, so the screens say Not available.

• Any bank, NPCI or telecom link, and deepfake detectionComing

  Payee verification, reversal, operator SIM-swap lookup, mule-account lists and voice or video deepfake detection are not built.

Existing checks run on the phone with permissions and Android limits. New source additions are listed separately below, with real-phone checks pending.

• Wi-Fi safety scoreLimited

  A 0 to 100 score with a reason for every deduction: open or weak security, a look-alike copy of a Wi-Fi name with different security, a changed router or DNS, a public hotspot and a login-page hotspot. The Wi-Fi name needs the location permission, and the screen asks for it in plain words. Warnings appear only while a Wi-Fi screen is open.

  > Published Android APK; see download page

• Man-in-the-middle, SSL stripping, ARP spoofingComing

  Android does not let an app see these, so the app says Not available.

• Keyboard check and clipboard check on tapLimited

  Flags a keyboard from outside a store or one that also holds Accessibility, and checks the text you copied only when you press the button. A risk warning, not a verdict on what a keyboard does.

  > Published Android APK; see download page

• Fake and cloned appsLimited

  Compares installed apps with a partial local list of popular and banking apps and their official package names; an app not on the list is never reported.

  > Published Android APK; see download page

• Pick a message to check (opt-in)Limited

  Off until you agree. Lists the 30 newest SMS so you can tap one to check it, on the phone; nothing is read in the background or uploaded. Needs the SMS permission, asked at that moment.

  > Published Android APK; see download page

• Call screening for unknown callers (opt-in)Limited

  Off until you turn it on. Checks the number of a caller not in your contacts against local rules and shows a "Possible scam caller" notice. Sees the number only, never the audio.

  > Published Android APK; see download page

• Location only when you ask for itAvailable

  Sent with a check-in only if you turn sharing on, or while a locate request is open. Wi-Fi information may separately need location permission; sharing a position requires the relevant consent.

  > 4.50

• Installed-apps list as a fingerprintAvailable

  Each check-in sends a hash of the app list; the full list only when it changed.

  > 4.50

• Network type and VPN stateAvailable

  Collected and shown, not scored.

  > 4.50

Implemented after the older public APK. Not released does not mean verified protection on your phone.

• Call-forwarding indicatorNot released

  Reads the indicator Android exposes, with Phone permission. Other SIMs and forwarding rules may be unknown. Carrier codes only open the dialler; no code is sent automatically.

• Reviewed number reportsNot released

  Consented reports and an expiring signed, reviewed number list for optional call screening. Contacts and personal allow-lists are exempt. No match does not mean safe; call audio is never analysed.

• Local App LockNot released

  Chosen apps use the phone’s authentication. Needs Usage access, draw-over-apps permission and running protection. Delays and manufacturer restrictions can limit it; Settings stays accessible.

• New and updated app checksNot released

  Adds risky permission combinations and reviewed signer checks to install/update scanning. Warnings do not block installation. Benign install/update fixtures and battery measurements still need real phones.

• App signer observationsNot released

  Opt-in package and signer observations, private to the family or organisation. Small groups are suppressed. A mismatch needs reviewed reference data; a count never proves an app genuine.

• Extra Wi-Fi and network checksNot released

  Saved-network access where Android permits it, network-change warnings and optional DNS/TLS comparisons with a chosen baseline. Differences are warning signs, not proof of interception.

• Reviewed web categoriesNot released

  Signed category lists, local DNS choices, allow-lists and block reasons. Needs VPN consent. Encrypted DNS, fixed addresses and unsupported traffic can bypass filtering; it cannot replace another browser’s HTTPS page.

• Bluetooth and USB checksNot released

  Opt-in repeated tracker-like Bluetooth sightings and USB accessory checks. A sighting does not identify a person, prove tracking or reveal a tracker’s location.

• Consented family phone toolsNot released

  A paired phone can share daily screen-time totals, new-app counts and risk reasons, and revoke sharing. Bedtime notices are reminders. App blocking, real time limits and YouTube supervision need platform tools such as Family Link.

• Privacy AdvisorNot released

  Sensitive permissions, available control powers and last-opened information, with an optional weekly summary. Android does not expose every permission’s last use; permission alone is not proof of misuse.

• One phone risk profileNot released

  Combines supported findings into one score and clear reasons on Home and consented family summaries. Unavailable checks stay unknown; a low score is not a safety guarantee.

• Selected-file overwrite and deleteNot released

  Works only on a document you choose and can report refusal or partial results. Flash storage, provider copies, cloud storage and backups prevent a guaranteed permanent erase.

• Breach and credential-monitoring interfacesNot released

  Verified-address, opt-in provider interfaces and schedules are implemented. Automated exposure results need a configured provider. Without one the result is Needs a provider, never clear.

• Deepfake provider interfaceNot released

  A provider contract and tests, plus callback and family code-word help. No configured analysis provider means no automated deepfake verdict. Sentinel does not listen to live calls.