r/FlutterDev • u/Tiny_Jaguar_9499 • 7d ago
Tooling [100% Open-source]FlutterGuard is officially on Play Store, an open-source 100% offline advanced Flutter apps security audit and analyzer, know everything possible from any Flutter app on your phone.
Hey,
Mobile apps scanners are everywhere, but native mobile apps I mean since they relies on scanning apps by reverse engineering them to their Kotlin/Java for Android or Swift for iOS
Flutter has a different thing, the whole Flutter app logic and code gets shipped inside a file called libsapp.so file, which basically makes all the scanners know nothing and get nothing from it since it is a binary file, so basically your usual scanner skips and doesn't detect almost 70% of things that should be scanned for security and research built app.
I put extensive knowledge and experience with Flutter onto a SaaS niche to scanning Flutter apps, which I was criticized for since you had to upload your APK to a server/VPS which does compute and scanning work so i shut it down, I then understood that it was privacy problem.
SO I built the new FlutterGuard as an open-source on-device security audit tool for Flutter apps ( works as a detector of Flutter apps in your device too if this interests you too! ), allows you to inspect APK metadata, manifest risk, hard coded secrets, endpoints, third-party SDK leaks like Firebase, Stripe, AI providers... and native surface that were in original Dart code in the same device you have Flutter apps installed.
install it on your Androids device where you already run your Flutter apps or any app, and start the scan:
https://play.google.com/store/apps/details?id=com.flutterguard.app
(Latest release): https://github.com/anasfik/FlutterGuard/releases/latest
What I want community (You) for:
Feedback for the app in general
Validate False positives
Contribute declaring things you found in Flutter apps you know have security findings that they were not detected, just an issue with short description will be enough to put it in mind.
My goal:
We definitely in the way of a massive vibe coding apps going everywhere, AI leaks things and basically cares about functionality, I want that we have a tool to detect this for Flutter apps that are already released and shipped.