# APKLeaks

APKLeaks is a Secrets Detection product. It runs on-premises. Pricing is free.

APKLeaks is a command-line tool that scans Android APK files to identify embedded URIs, endpoints, and secrets for security assessment purposes.

Checked October 2026.

## What is APKLeaks?

APKLeaks is a command-line tool that analyzes Android APK files to identify security-sensitive information embedded within application code.

The tool uses the jadx disassembler to decompile APK files and extract readable code for comprehensive analysis. It scans the decompiled code to locate URIs, endpoints, and secrets that may pose security risks.

Key features include:
- Automated scanning of APK files for sensitive data patterns
- Detection of API endpoints, authentication tokens, and database connection strings
- Support for custom pattern files to enable targeted scanning
- Multiple installation methods including PyPi, source compilation, and Docker containers
- Configurable output file specification for scan results
- Customizable disassembler arguments for advanced users

The tool processes APK files from local file paths and generates detailed reports of discovered security-sensitive information. Results can be saved to specified output files for further analysis or documentation purposes.

APKLeaks is designed for security professionals conducting Android application assessments, developers performing security reviews of their applications, and security auditors evaluating mobile application security posture.

Tags: Security Scanning, Android Security

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.

## Quick facts

- Category: [Application Security](https://cybersectools.com/categories/application-security) · [Secrets Detection](https://cybersectools.com/categories/secrets-detection)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 5,995
- Website: github.com

## Where it ranks

No shortlist covers this product's category yet. The closest is [Best Application Security Solutions for Business](https://cybersectools.com/shortlists/best-application-security-solutions).

## APKLeaks FAQ

### What is APKLeaks?

APKLeaks is a product in the Secrets Detection category. It covers Security Scanning and Android Security.

### What is the pricing for APKLeaks?

APKLeaks is free. Download and setup instructions are at https://github.com/dwisiswant0/apkleaks/.

### What are alternatives to APKLeaks?

Alternatives to APKLeaks listed on CybersecTools:

1. [iScan Advanced Scanning Tool](https://cybersectools.com/tools/iscan-hidden-secrets) - Scans repositories for exposed secrets, API keys, and credentials for bug bounty (Commercial)
2. [Secrets Catcher](https://cybersectools.com/tools/secrets-catcher) - Scans corporate infra for hardcoded credentials, tokens & sensitive data leaks. (Commercial)
3. [Apiiro Secrets Security](https://cybersectools.com/tools/apiiro-secrets-security) - Detects, validates, and remediates secrets in code and pipelines (Commercial)
4. [Semgrep Secrets](https://cybersectools.com/tools/semgrep-secrets) - Detects hardcoded secrets in code using semantic analysis & validation (Commercial)
5. [Secrets Scanner](https://cybersectools.com/tools/secrets-scanner) - Detects API keys, passwords, and tokens in code with AI-based false positive filtering. (Commercial)

Compare all APKLeaks alternatives at [https://cybersectools.com/alternatives/apkleaks](https://cybersectools.com/alternatives/apkleaks)

### What deployment and organization size does APKLeaks fit?

APKLeaks is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare APKLeaks with similar solutions

- [APKLeaks vs iScan Advanced Scanning Tool](https://cybersectools.com/compare/apkleaks-vs-iscan-hidden-secrets)
- [APKLeaks vs Secrets Catcher](https://cybersectools.com/compare/apkleaks-vs-secrets-catcher)
- [APKLeaks vs Apiiro Secrets Security](https://cybersectools.com/compare/apiiro-secrets-security-vs-apkleaks)

All alternatives to APKLeaks: [/alternatives/apkleaks](https://cybersectools.com/alternatives/apkleaks)

---

Source: https://cybersectools.com/tools/apkleaks

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on APKLeaks: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md