package icon

Droynis

Read-only security and privacy audit for your phone
New in version 0.13.0
9 new checks: time since restart, notification history, USB debugging authorization timeout, autofill service, digital assistant app, apps with location all the time, secure NFC, and with ADB: Wi-Fi MAC randomization and open Wi-Fi networks that join automatically. Android build check is now critical when adb needs no authorization. Advanced Protection shows as not applicable on GrapheneOS.
Droynis checks the security and privacy settings of the phone it runs on, explains every finding in plain words, shows the raw evidence and opens the Settings screen that fixes it. It never changes anything itself.

Droynis is not an antivirus or malware scanner: it audits how the phone is set up, not whether an app is malicious.

What it checks

  • Device integrity: security patch age, vendor and kernel patches, encryption, bootloader lock, root, SELinux, WebView updates, time since restart

  • Access control: screen lock and its strength, lock delay, remote lock and erase, USB and wireless debugging and their authorization timeout, Smart Lock, SIM PIN

  • Apps and permissions: accessibility services, device admins, notification access, SMS and call log access, location all the time, autofill and assistant apps, sideloaded and debuggable apps, special app access

  • Network and radios: Private DNS, VPN, Wi-Fi security and MAC randomization, open Wi-Fi networks that join automatically, HTTP proxies, user certificates, 2G, Bluetooth, NFC and Secure NFC, location



Four tiers
Most checks need no setup. Two read-only adb grants, Shizuku or root unlock the rest; privileged tiers run only a fixed list of read-only commands.

Honest results
A check passes only on a value it actually read. When Android won't say, the result is Unknown, never Passed. A score from 0 to 100 sums it up; checks you can't fix can be muted.

Private by design
No internet permission, no Google Play Services, no analytics. Reports (Markdown or JSON) leave out IP addresses, DNS and proxy servers and trusted computers by default.

Droynis is not affiliated with Lynis or CISOfy.
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot

Versions

Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.

Download F-Droid
  • Version 0.13.0 (19) suggested Added on Oct 27, 2026

    arm64-v8a armeabi-v7a x86 x86_64

    This version requires Android 8.0 or newer.

    It is built and signed by the original developer, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • android.permission.DUMP
    • android.permission.PACKAGE_USAGE_STATS
    • android.permission.QUERY_ADVANCED_PROTECTION_MODE
    • query all packages
      Allows an app to see all installed packages.
    • request screen lock complexity
      Allows the app to learn the screen lock complexity level (high, medium, low or none), which indicates the possible range of length and type of the screen lock. The app can also suggest to users that they update the screen lock to a certain level but users can freely ignore and navigate away. Note that the screen lock is not stored in plaintext so the app does not know the exact password.
    • io.github.capitan0n.droynis.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
    • moe.shizuku.manager.permission.API_V23

    Download APK 1.7 MiB PGP Signature | Build Log

    • New in version 0.12.1
    Built with JDK 21 so F-Droid can reproduce it with its default toolchain. README: explains how to set up the ADB tier and states that Droynis is not an antivirus. No changes to the checks.
  • Version 0.12.1 (18) - Added on Oct 12, 2026

    arm64-v8a armeabi-v7a x86 x86_64

    This version requires Android 8.0 or newer.

    It is built and signed by the original developer, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • android.permission.DUMP
    • android.permission.PACKAGE_USAGE_STATS
    • android.permission.QUERY_ADVANCED_PROTECTION_MODE
    • query all packages
      Allows an app to see all installed packages.
    • request screen lock complexity
      Allows the app to learn the screen lock complexity level (high, medium, low or none), which indicates the possible range of length and type of the screen lock. The app can also suggest to users that they update the screen lock to a certain level but users can freely ignore and navigate away. Note that the screen lock is not stored in plaintext so the app does not know the exact password.
    • io.github.capitan0n.droynis.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
    • moe.shizuku.manager.permission.API_V23

    Download APK 1.6 MiB PGP Signature | Build Log

Find Apps