Home / How it works
How it works
From a suspicious file to a verdict you can trust.
SpyApp blends multi-engine detection, live reputation data and human community insight into one clear answer. Here is the full pipeline.
Submit your sample
Drag and drop a file, or paste a URL, domain or IP address into the scanner at /scan/files_urls/. We accept executables, documents, archives, mobile installers (APK/IPA metadata) and links. You do not need an account to run a scan, which means you can check something the moment it looks wrong.
Hashing & deduplication
Files are hashed (SHA-256) so we can recognise a sample instantly if it has been seen before. If a match exists, you get the historical verdict, the community vote and every comment in milliseconds — no need to re-upload sensitive data.
Multi-signal analysis
New samples are run against detection signatures, behavioural heuristics and reputation feeds. For URLs we follow redirects, inspect the destination, check domain age and look for phishing, tracking and stalkerware distribution patterns.
Scoring
All signals are combined into a single spyware/malware score from 0 to 100. The score weighs how many engines flagged the sample, the severity of the behaviour and how the community has voted. It is transparent — you can see what drove the number.
Read the detail
You receive a plain-language verdict plus a full technical breakdown: detection names, file properties, network behaviour and related indicators. It is laid out like a lab report so both beginners and analysts can use it.
Vote, comment & share
Finally, you can vote on whether the sample is truly spyware or a false alarm, and leave a comment describing what you observed. Your input refines the score for everyone who scans the same item next.
Behind the score
Why a single number is not the whole story.
A score gives you a fast read, but SpyApp always shows the evidence behind it. Two files can both score 80 for very different reasons — one because it silently uploads contacts, another because it hides from the app drawer. The detail view tells you which.
Open the scanner →