Description

⚠ Important — external service costs are NOT included in this purchase. RevDroid is a self-hosted application. Its AI features connect to a third-party LLM provider (OpenRouter), which bills you directly based on usage, and sign-in uses your own Google OAuth credentials. The purchase price does NOT include any API credits, subscriptions, or usage costs — you (the deployer) create your own provider accounts and pay them separately. The local static-analysis engine runs entirely on your machine and requires no paid service.

AI disclosure. RevDroid uses artificial intelligence. Its hunt agent is powered by large language models accessed through OpenRouter (you choose the model, e.g. Anthropic Claude, OpenAI, DeepSeek). The AI reasons over your local scan data to generate exploit-chain hypotheses, suggested steps and written summaries. AI output is assistive and must be verified by you; it does not replace manual testing. The 12-phase static-analysis engine itself is deterministic and uses no AI.

An APK is just a zip file. Anyone can open it. The only question is whether you looked first.
The moment your app hits a store, its bytes are on other people’s machines. A stranger can unzip it, decompile it, and read what you left inside in an afternoon. RevDroid lets you be the first person to do that — decompiling any Android APK, running a 12-phase security scan, and letting an AI agent turn the raw findings into real, step-by-step exploit chains. All of it runs locally. The app’s bytes never leave your machine.

Point it at an app. In minutes you see what a bounty hunter would see: the hardcoded key, the exported screen anyone can launch, the traffic going out in cleartext, the WebView that will run whatever JavaScript it is handed. Then an AI reasons over it and hands you the attack path, not a wall of warnings you will ignore.