🔒 App Security SDK for Flutter

App Security SDK is a Flutter plugin that helps you secure your application by detecting unsafe environments like rooted/jailbroken devices, cloned apps, piracy, debugging, and more. It also validates the app’s integrity, detects VPN usage, and ensures the app is installed from trusted sources.

📷 Screenshots

gif

✅ Android Permissions

If you want to access IMEI (available only on Android versions below 10), you need to add the following permission in your AndroidManifest.xml:

<uses-permission android:name="android.permission.READ_PHONE_STATE" />

⚠️ On Android 10 (API 29) and above, IMEI access is restricted for privacy reasons, so this feature will return null on newer devices.

✨ Features

✅ Root/Jailbreak Detection Detect if the device is rooted (Android) or jailbroken (iOS).
✅ VPN Detection Identify active VPN connections for network safety.
✅ Real Device Check Ensure the app runs on a real device and not on an emulator/simulator.
✅ Developer Mode & Debugging Check Detect whether the device is in developer mode or being debugged.
✅ Piracy Detection Validate app integrity and detect pirate apps using Kevlar.
✅ Install Source Verification Ensure the app was installed from trusted sources like Play Store, App Store, or TestFlight.
✅ Clone Detection Detect cloned or dual apps using sandbox validation.
✅ Device Identifier Access Fetch Device ID (Android ID) and Identifier for Vendor (iOS).

📦 Installation

Add the package to your pubspec.yaml:

dependencies:
  app_security: ^latest_version

dependencies:
  flutter pub get

🚀 Usage

Import the package:

import 'package:app_security/app_security.dart';

✅ Root/Jailbreak Detection

bool isRooted = await AppSecurity.isUseJailBrokenOrRoot();

🔒 Check VPN Usage

bool vpnActive = await AppSecurity.isDeviceUseVPN();

🛡️ Validate App Environment

List<String>? issues = await AppSecurity.isSafeEnvironment();
print(issues); // e.g., ["JAILBREAK", "VPN_ACTIVE"]

📲 Get Device ID

String? deviceId = await AppSecurity.getDeviceId();

🛠 Check Install Source

String? source = await AppSecurity.installSource();
print(source); // e.g., "playstore", "appstore", "testflight"

🛠 Open developer Options

String? source = await AppSecurity.openDeveloperSettings();

🔍 Detect Cloned App

bool isCloned = await AppSecurity.isClonedApp();

🛠 Add a Window Flag

import 'package:app_security/window_flags.dart';

bool isCloned = await AppSecurity.addFlags(WindowFlags.FLAG_SECURE);

🛠 Clear a Window Flag

import 'package:app_security/window_flags.dart';

bool isCloned = await AppSecurity.clearFlags(WindowFlags.FLAG_SECURE);

🛡 Supported Platforms

✅ Android: Uses Kevlar for root and piracy detection.
✅ iOS: Implements native checks for jailbreak, VPN, and integrity.

🛠️ Customization

Configure allowed installers: Play Store, App Store, TestFlight.
Extend detection for enterprise distribution or sideloaded apps.

📄 License

This project is licensed under the MIT License. See the LICENSE file for details.

💬 Contributing

Feel free to submit issues or pull requests. Contributions are welcome!

🌐 Author

Made with ❤️ by Deepak.