# APK Sentinel

> Agent-native static APK triage producing deterministic, evidence-backed JSON.

Canonical site: https://apk-sentinel.willowbirdie.com/

## Product

Submit one Android APK and receive structured triage evidence for security, fraud, app-review, trust-and-safety, and platform workflows.

## Primary operation

POST /v1/apk/triage with one APK in multipart field `file`.

## Report

The report contains SHA-256 identity, package and SDK metadata, permissions, exported components, signing metadata, bounded URL/domain evidence, suspicious static indicators, evidence-backed findings, and a deterministic rule-based risk score.

## Safety

Static analysis only. APKs are not installed, executed, or side-loaded. Extracted URLs are inert report data and are not fetched. Resource, time, output, and concurrency limits are explicit.

## Resources

- Product brief: https://apk-sentinel.willowbirdie.com/agent-product.md
- API contract: https://apk-sentinel.willowbirdie.com/agent-api-contract.md
- OpenAPI: https://apk-sentinel.willowbirdie.com/openapi.json
- About: https://apk-sentinel.willowbirdie.com/about.md
- Availability and pricing: https://apk-sentinel.willowbirdie.com/pricing.md
- Contact: https://apk-sentinel.willowbirdie.com/contact.md
- Security: https://apk-sentinel.willowbirdie.com/security/
- Vulnerability reporting: https://apk-sentinel.willowbirdie.com/.well-known/security.txt
- Synthetic report: https://apk-sentinel.willowbirdie.com/examples/apk-sentinel-sanitized-report.json
- Source and evidence: https://github.com/tmtz1/apk-sentinel-public-showcase

Deployment, payment, pricing, retention, and intake availability are deployment-specific.