Mobile spyware forensics
Know if your phone is being watched.
Inviolable checks your iPhone or Android phone for mercenary spyware and stalkerware using the forensic method developed by Amnesty International's Security Lab. The analysis runs on your own computer.
The problem
The most dangerous spyware leaves no visible trace.
Tools like Pegasus and Predator have been found on the phones of journalists, lawyers and activists. They do not show a warning, a pop-up or an obvious drop in battery. The only way to know is to look for the traces they leave behind in the device's records.
Overview
Why Inviolable exists
Narrated in English · captions included
How it works
Three steps. Your data stays with you.
01
Connect your phone
Choose a plan, download your one-time analysis script and connect your iPhone or Android phone to your own computer with a cable.
02
The analysis runs locally
The Mobile Verification Toolkit examines the device backup on your computer against indicators of compromise that are refreshed on every run. The tools are removed before you see your result.
03
Get your report and certificate
You receive a clear report of what was checked and found, and a certificate with a SHA-256 hash that anyone can verify. If something is found, we guide you through isolating the device.
What we check
Public, auditable indicators. Not a black box.
Every analysis checks your device against the public indicator sets maintained by the Mobile Verification Toolkit project, the stalkerware indicator list and our own curated detection rules.
Indicator sets are downloaded fresh from their public sources each time an analysis runs. No tool can guarantee detection of every threat; Inviolable reports exactly what was checked.
- NSO Group Pegasus
- Predator (Intellexa / Cytrox)
- RCS Lab Hermit
- QuaDream KingSpawn
- Candiru DevilsTongue
- Operation Triangulation
- WyrmSpy and DragonEgg
- NoviSpy · EagleMsgSpy
- Commercial stalkerware
- Curated YARA rules
Who it is for
For people whose work makes them a target.
Journalists
Protect your sources before and after sensitive stories.
Lawyers
Check devices involved in sensitive cases and document the result.
Activists
Find out whether your phone has been compromised.
Executives and families
Check the devices of people with access to sensitive information.
Privacy by design
Your phone backup never leaves your computer.
The analysis happens on your hardware. Only the findings are sent to your account so we can issue your report and certificate. We never receive your messages, photos or files.
Plans
One analysis. A clear answer.
Certificate
One device, with a verifiable certificate
- 1 device (iPhone or Android)
- 2 analyses (scan + re-scan)
- Public MVT indicators + stalkerware + YARA
- PDF certificate with SHA-256 hash
- Phone backup stays on your computer
Multi-Device
Up to 5 devices for families, teams and small firms
- Up to 5 devices
- 2 analyses per device (scan + re-scan)
- Public MVT indicators + stalkerware + YARA
- Certificate with SHA-256 hash per device
- Priority email support
B2B / Forensic
Analyst-reviewed report for legal and corporate cases
- Per device, analyst-reviewed
- Chain-of-custody documentation
- Named signatory
- Public MVT indicators + stalkerware + YARA
- Priority turnaround
- Volume / multi-device by quote
Find out today.
It runs on your own computer. The first phone backup usually takes 30 to 60 minutes.
Questions before you start? Contact support