APK Sentinel · agent product

Static APK triage an agent can actually use.

Submit one Android APK and receive deterministic, evidence-backed JSON for security, fraud, app-review, and trust-and-safety workflows.

Agent product brief API contract OpenAPI Availability and pricing Contact Security Synthetic report Source and evidence

Structured evidence

Package identity, SDK metadata, permissions, exported components, signing metadata, bounded URLs, indicators, findings, and a rule-based risk score.

Static-only boundary

APK files are not installed, executed, or side-loaded. Extracted URLs are inert evidence and are not fetched.

Built for machines

JSON-first output, schema versioning, explicit limits, sanitized errors, and no caller-supplied analyzer flags.

Primary operation

POST /v1/apk/triage
Content-Type: multipart/form-data

file=<one APK>

Deployment URL, authentication or payment mechanism, pricing, retention, and availability are deployment-specific. This page documents the product contract; it does not expose an intake endpoint.

About the product · Availability and pricing · Contact · Security

What it is not

APK Sentinel is triage, not proof that an APK is benign or malicious. It does not replace reverse engineering, threat intelligence, dynamic analysis, or incident response.