# APK Sentinel

> Deterministic, automation-friendly static APK triage for software agents, automated security workflows, and human analysts.

## Availability

<!-- AVAILABILITY:START -->
Availability: expired. Worker readiness was reverified on 2026-10-20: the analysis pipeline completed a synthetic fixture end to end and cleaned up afterwards. Paid analysis is still not offered, because the published beta terms expired on 2026-09-05 and have not been replaced. An unpaid challenge remains observable. Do not submit payment or private APKs. Browser upload: not enabled. General customer intake: not enabled. Customer support: not enabled.

Canonical status: https://apk-sentinel.willowbirdie.com/product-status.json
Availability explanation: https://apk-sentinel.willowbirdie.com/pricing/
Documented endpoint: https://api.willowbirdie.com/v1/apk/triage
<!-- AVAILABILITY:END -->

An unpaid HTTP 402 observation does not prove paid analysis or renew pricing.

## Product

APK Sentinel accepts one Android APK and produces a structured triage report for security, fraud, app-review, trust-and-safety, and platform workflows.

## Report contents

- SHA-256 artifact identity
- Package and SDK metadata
- Permissions and dangerous-permission combinations
- Declared and exported components
- Signing schemes and certificate metadata
- Bounded URL and domain evidence
- Suspicious static API indicators
- Evidence-backed findings
- Deterministic rule-based risk score

## Safety boundary

- Static analysis only; APKs are not installed, executed, or side-loaded.
- Extracted URLs are inert report data and are not fetched.
- Resource, time, output, and concurrency limits are explicit.
- Temporary artifacts are intended to be deleted after processing.
- The report is triage evidence, not a guarantee that an APK is safe or malicious.

## Public references

- Product brief: https://github.com/tmtz1/apk-sentinel/blob/main/docs/agent-product.md
- API contract: https://github.com/tmtz1/apk-sentinel/blob/main/docs/agent-api-contract.md
- Synthetic report: https://github.com/tmtz1/apk-sentinel/blob/main/examples/apk-sentinel-sanitized-report.json
- Validation notes: https://github.com/tmtz1/apk-sentinel/blob/main/validation/apk-sentinel-validation.md
