Skip to content

M4urk/Varynx_Android

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

17 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

VARYNX

Device Intelligence Engine — Privacy-First Mobile Security for Android

Platform Min SDK Target SDK License


Overview

VARYNX is a 100% offline security engine that protects your Android device without sending a single byte to the cloud. No telemetry, no analytics, no tracking — your data never leaves your device.

Key Principles

  • Zero Cloud Dependency — All threat detection runs locally on your device
  • No Data Collection — We don't collect, transmit, or sell your data
  • Transparent Security — Clear explanations of what we detect and why
  • User Control — You decide what to monitor and when

Features

Real-Time Guardian Engine

A background service continuously monitors your device across 10 security modules with a 10-minute wall-clock-aligned cadence (~144 scans/day). Runs in a process-lifetime coroutine scope that survives app exit, screen off, and service recreation.

Network Protection

  • Wi-Fi Security — Detects open networks, weak encryption, rogue access points
  • Bluetooth Scanner — Proximity skimmer detection via BLE signal analysis
  • NFC Monitor — Tap detection and secure element integrity checks
  • Proximity Alert — Identifies suspicious nearby wireless devices

Device Protection

  • Clipboard Guard — Monitors for sensitive data exposure (passwords, keys, seeds)
  • CryptoShield — Detects crypto drainer apps, clipboard hijacking, fake wallet QR codes
  • QR Scanner — Camera-based QR code scanning with threat analysis (ML Kit + ZXing dual decoder)
  • Device State — Root detection, VPN status, developer mode, USB debugging checks

Scam Detection

  • SMS Analysis — Scans recent messages for phishing links, URL shorteners, and scam keyword clusters
  • Call Log Monitor — Detects repeated unknown callers, rapid-fire call bursts, short-duration robocall probes, and SMS→call bait sequences
  • Call Screening — System-level call screening service flags burst activity in real time

Permissions Audit

  • Analyzes installed apps for risky permission combinations
  • Flags apps with dangerous access patterns

Security Dashboard

  • Unified security score (0–100) with color-coded severity
  • Expandable category tiles — Network, Device, and Guardian
  • Real-time permission status with Fix Now action
  • One-tap full system scan

Smart Alerts

  • Configurable sensitivity levels (Relaxed / Moderate / Strict)
  • Severity-based categorization (OK / Warning / Alert / Critical)
  • Acknowledgement workflows

Encrypted Audit Logs

  • All scan history stored in encrypted local database
  • Export capability (user-initiated only)
  • Automatic rotation and retention

Privacy Settings

  • Per-engine enable/disable toggles
  • Protection mode presets
  • Data export and clear controls
  • Reset to defaults

Architecture

┌─────────────────────────────────────┐
│           Security Dashboard        │
│    Score · Tiles · Permissions       │
└──────────────┬──────────────────────┘
               │
┌──────────────▼──────────────────────┐
│         Guardian Engine             │
│   Background service (START_STICKY) │
│   10-min wall-clock aligned cadence  │
└──────────────┬──────────────────────┘
               │
┌──────────────▼──────────────────────┐
│          Threat Engine              │
│   Orchestrates 10 security modules  │
│   Scoring · Timeout · Logging       │
└──────────────┬──────────────────────┘
               │
┌──────────────▼──────────────────────┐
│      Guardian Modules (10)          │
├─────────────────────────────────────┤
│ WiFi · Bluetooth · NFC · Proximity  │
│ Clipboard · CryptoShield · QR       │
│ DeviceState · Permissions · Scam    │
└─────────────────────────────────────┘
  • Modular — Each engine is an independent Gradle module
  • Offline-only — Zero network calls, zero cloud dependencies
  • Battery-aware — Adapts BLE scan behavior based on battery level
  • Wall-clock anchored — Scans fire at :00, :10, :20… regardless of scan duration
  • Secure storage — Encrypted DataStore + Room database for logs

Requirements

  • Android 13+ (API 33)
  • No internet required — Works completely offline
  • Permissions: Requested at runtime with clear explanations

Privacy

VARYNX collects zero user data:

  • No analytics
  • No crash reporting to external services
  • No advertising identifiers
  • No location tracking
  • No network requests

All security data stays on your device. Export is only available through explicit user action.

See PRIVACY.md for the full privacy policy.


Tech Stack

Layer Technology
Language Kotlin
UI View System (XML + ViewBinding) + Jetpack Compose
Background Service (START_STICKY) + Coroutines
Storage DataStore (encrypted) + Room
Camera CameraX + ML Kit + ZXing
Build Gradle 8.11 · AGP 8.7.0 · Kotlin 2.0.21
Min SDK 33 (Android 13)
Target SDK 35 (Android 15)

Roadmap

V1 (Current) — Foundation

  • 10 active security modules
  • Background guardian with adaptive scheduling
  • Encrypted audit logging
  • Full offline operation
  • Play Store ready

V2 — Evolution

  • Unified threat intelligence engine
  • Advanced behavioral analysis
  • Enhanced UI/UX
  • Expanded device coverage

Testing

195 unit tests across 4 modules, all passing.

# Run the full suite
python3 varynx_dev.py test all --full --stress --audit

# Individual suites
python3 varynx_dev.py test guardian    # Guardian core + looper
python3 varynx_dev.py test threat      # Threat engine + concurrency
python3 varynx_dev.py test scam        # Scam pattern detection
python3 varynx_dev.py test qr          # QR scanner classification
python3 varynx_dev.py test ui          # Dashboard state logic
python3 varynx_dev.py test stress      # 100-scan loops, rapid cycling
python3 varynx_dev.py test audit       # Structural invariant checks
Module Tests Coverage
engine-threat 85 Guardian core, threat engine, concurrency, failures, stress, audit
engine-scam 47 Pattern matching, keyword escalation, burst math, bait sequences
engine-qrscanner 30 URL classification, dangerous patterns, trusted domains
app 33 Dashboard state, score levels, protection status, tile expansion

Security

Found a vulnerability? Please report it responsibly.

See SECURITY.md for our security policy and reporting process.


Contributing

We welcome bug reports and feature requests! See CONTRIBUTING.md for guidelines.

Please follow our Code of Conduct in all interactions.


License

Copyright © 2026 VARYNX. All rights reserved.

This software is proprietary. See LICENSE for details.


Status

Version 1.9.3 — Latest Release

  • 10 active security engines
  • Background guardian with 10-min wall-clock cadence
  • 195 unit tests with unified test runner
  • Encrypted audit logging
  • Fully offline operation
  • Play Store compliant

Contact


Founder Story

I didn't build VARYNX because I wanted to make another app. I built it because I lived through the exact problems this project now solves.

For years, I saw people get targeted — myself included — by scams, fake apps, social engineering, and the kind of digital manipulation that preys on normal families who just want to use their phones safely. I saw how easy it was for a device to become a doorway for stress, fear, and financial damage. And I saw how most "security apps" weren't built for real people — they were built for data collection, cloud dependency, or marketing.

Nothing existed that was simple, offline, private, and built for adults who just want their phone to be safe without being tracked.

So I built it myself.

VARYNX started as a personal tool — a way to protect my own family. But the more I built, the more I realized the gap in the market: there was no offline guardian that stayed on the device, respected privacy, and actually helped people understand what was happening on their phone.

I'm not a corporation. I'm a founder, a parent, and the sole provider for my family. I built VARYNX at night, after work, through setbacks, rebuilds, and months of discipline. Every module, every detector, every decision was shaped by one mission:

Give people real protection without taking anything from them.

VARYNX Version 1 is the foundation — a stable, offline guardian that proves the architecture works. It's the version that creates trust, earns traction, and opens the door for partnerships.

Version 2 will be the evolution — a unified engine built to be unstoppable, massively capable, and far beyond anything V1 can do. But V2 only exists because V1 is real, stable, and built with intention.

This project is not a trend, not a clone, and not a shortcut. It's the result of lived experience, real problems, and a commitment to building something that actually protects people.

VARYNX exists because it needed to. And it will keep growing because the mission is real.

Corey, Founder of VARYNX


Your security. Your device. Your data.

About

VARYNX — Privacy-first offline security engine for Android. 10 real-time threat modules, zero cloud dependency, zero data collection.

Topics

Resources

License

Code of conduct

Contributing

Security policy

Stars

Watchers

Forks

Packages