Droynis
io.github.capitan0n.droynis
Zapstore Catalog Read-only security and privacy audit for your phone
Droynis checks the security and privacy settings of the phone it runs on, explains every finding in plain words, shows the raw evidence and opens the Settings screen that fixes it. It never changes anything itself. Droynis is not an antivirus or malware scanner: it audits how the phone is set up, not whether an app is malicious. **What it checks** - Device integrity: security patch age, vendor and kernel patches, encryption, bootloader lock, root, SELinux, WebView updates, time since restart - Access control: screen lock and its strength, biometric unlock strength, lock delay, remote lock and erase, USB and wireless debugging and their authorization timeout, Smart Lock, SIM PIN - Apps and permissions: accessibility services, device admins, notification access, SMS and call log access, location all the time, autofill and assistant apps, sideloaded and debuggable apps, special app access, apps that skip battery optimization or record the screen without asking, Google Play services - Network and radios: Private DNS, VPN, Wi-Fi security and MAC randomization, open Wi-Fi networks that join automatically, HTTP proxies, user and added system certificates, 2G, mobile network encryption, Bluetooth, NFC and Secure NFC, location **Four tiers** Most checks need no setup. Two read-only adb grants, Shizuku or root unlock the rest; privileged tiers run only a fixed list of read-only commands. **Honest results** A check passes only on a value it actually read. When Android won't say, the result is Unknown, never Passed. A score from 0 to 100 sums it up; checks you can't fix can be muted. **Private by design** No internet permission, no Google Play Services, no analytics. Reports (Markdown or JSON) leave out IP addresses, DNS and proxy servers and trusted computers by default. Droynis is not affiliated with Lynis or CISOfy.
First release: Nov 5, 2026, 1 total release.
Most recent release: Nov 5, 2026.
Appears in 0 app stacks.
0 sats / 0 zaps received in the past year.
Sats Received
Underlying data available via MCP: app_zaps, app_releases.
Zap Count
Underlying data available via MCP: app_zaps, app_releases.
Releases
- Nov 5, 2026 0.16.015 new checks, 90 in all. New Suspicious apps category: apps hiding from the app drawer, hidden apps that start, run or show screens on their own, apps installed by another app, banking-trojan permissions, debug or test signing keys, background SMS, call log and contacts use. Also new: storage space, hotspot security, hidden Wi-Fi, passkey providers, clipboard alerts, Shizuku access, lock screen controls. Trust an app to stop counting it. Settings links highlight the switch to change. Signing certificate SHA-256: `3604c5d2464cf53614df4ab944d1d5e1150e6144de49340b05953e23c67f0caa` Verify the download: `sha256sum -c droynis-0.16.0.apk.sha256`, and that GitHub built it from this tag: `gh attestation verify droynis-0.16.0.apk --repo capitan0n/droynis`.