Open-source mobile security apps
16 mobile security apps whose code is public under an OSI-approved license, rated for privacy with evidence. Picks first, then by score.
AFWall+ Grade B
AFWall+ is an iptables front end for rooted Android devices that controls which apps can reach the network over Wi-Fi, mobile data, VPN and LAN.
GPL-3.0. Source code
App Manager Grade B
Open source Android package manager that shows app components, permissions, trackers and signatures, and can block trackers, freeze apps and change permissions, with more control on rooted devices or through ADB.
GPL-3.0-or-later. Source code
Exodus Grade B
Android app that shows which trackers and permissions each installed app has, using reports from the Exodus Privacy database of scanned APKs.
GPL-3.0. Source code
Greentooth Grade B
Android app that turns Bluetooth off automatically after the last connected device disconnects. It is no longer maintained.
Apache-2.0. Source code
Insular Grade B
Fully open-source fork of Island that isolates Android apps in a work profile, where they can be cloned, frozen or hidden. Distributed through F-Droid.
Apache-2.0. Source code
InviZible Pro Grade B
Open source Android app that routes device traffic through Tor, encrypts DNS with DNSCrypt, and gives access to the I2P network, with a per-app firewall. Works with or without root.
GPL-3.0. Source code
NetGuard Grade B
A firewall app for Android, which does not require root.
GPL-3.0. Source code
Orbot Grade B
Android and iOS app from the Guardian Project that routes app traffic through the Tor network as a VPN or proxy.
BSD-3-Clause. Source code
PCAPdroid Grade B
Open source Android app that captures and inspects the network traffic of other apps without root, using a local VPN. It can export PCAP files and decrypt TLS, with optional paid firewall and malware detection features.
GPL-3.0. Source code
PrivateLock Grade B
Android app that locks the screen when the accelerometer detects movement above a set threshold.
GPL-3.0. Source code
RethinkDNS & Firewall Grade B
Open-source DNS-based content blocker and firewall for Android that does not require root.
Apache-2.0. Source code
Shelter Grade B
Open source Android app that uses the work profile feature to run cloned or separately installed apps in an isolated space, and can freeze them when they are not in use.
GPL-3.0. Source code
Spectre Grade B
Android app that scans Bluetooth, Wi-Fi, cellular and GNSS signals, with tools for wireless security testing.
GPL-3.0. Source code
SuperFreezZ Grade B
Android app that freezes all background activity of selected apps.
GPL-3.0. Source code
TrackerControl Grade B
Android app that monitors and blocks tracking connections made by other apps, using a local VPN that needs no root.
GPL-3.0. Source code
Island Grade D
Android sandbox that uses a work profile to clone selected apps, isolate them from personal data, and freeze them when not in use.
Apache-2.0. Source code
Compare all 21 mobile security apps, open source or not.